HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTHigh
CBIZ, INC.
bd_b2aef612a1f1ebc8 · schema v1 · pii pii-v1
Full breach record for CBIZ, INC. →CBIZ, Inc. experienced an external system breach between May 29, 2023, and June 5, 2023, which was discovered on August 10, 2023. The breach affected 35,843 individuals, compromising their names and Social Security numbers. CBIZ notified affected consumers in writing on September 1, 2023, and offered complimentary credit monitoring and identity theft protection services through Kroll.
Maine clockDiscovered Aug 10, 2023 → Filed with AG Sep 1, 202322d ✓ ME AG ≤30d22 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6a0c7d61fabe79e4Leak Sitemeowfiled 2024-06-22(295d gap)Verified
Regulatory filings (3) · sorted by filing gap
- bd_bc1e70e9424da1a0California State AGfiled 2023-09-01Verified
- bd_f5753075017fc529Vermont State AGfiled 2023-09-01Verified
- bd_a81b1fd6324d50b1Maine State AGfiled 2023-12-29(119d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d4459dc9-cd5b-4422-921d-b305d5caef7d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 1, 2023
- Raw hash
- f326310f5c214d502e32a62ccb8395ca00c24df0655d1ece9361da4628b226f2
Reporting entity
- Name
- CBIZ, INC.norm: cbiz
- Domain
- cbiz.com
Victim entity
- Name
- CBIZ, INC.norm: cbiz
- Domain
- cbiz.com
Incident
- Discovered
- Aug 10, 2023
- Materiality determined
- —
- Notification sent
- Sep 1, 2023
- Affected individuals
- 35,843
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- Threat actor
- External
Compliance
- Time to disclose
- 22 days(22 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 22d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 10, 2023→ Filed with AG: Sep 1, 202322d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.