Applied Plan Administrators
bd_b3b1a82358873d33 · schema v1 · pii pii-v1
Full breach record for Applied Plan Administrators →Applied Plan Administrators (APA), a division of The Retirement Advantage, Inc. (TRA), experienced a phishing attack resulting in unauthorized access to one employee email account from February 10-12, 2018. TRA detected suspicious activity on February 12, 2018, and secured the account. Forensic investigation confirmed unauthorized access but found no evidence that personally identifiable information (PII) was accessed or acquired. However, out of an abundance of caution, TRA notified potentially affected California residents whose data (names, addresses, SSNs, dates of birth, financial account numbers) was stored in the compromised account. TRA offered 12 months of free credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Feb 10, 2018
Begins
Feb 12, 2018
Discovered
Mar 28, 2018
Filed
vs. sector median
2 wks faster
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.