MisuseFinancial ServicesTechnologyFinancePrivilege AbuseEmployee Data InvolvedTargetedIdentity (basic)Government IDMediumContained

Total System Services, Inc. (TSYS)

bd_b55b305312862563 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 11, 2013

Filed

Sep 26, 2013

To disclose

15 days

Affected

1state residents only

Confidence

66%

Full breach record for Total System Services, Inc. (TSYS) →

TSYS reported that an employee of third-party administrator Paragon Benefits misappropriated a digital file containing names, addresses, birth dates, and SSNs of one TSYS employee in New Hampshire on Sept 5, 2013. TSYS discovered the incident on Sept 11, 2013, notified federal law enforcement, and began mailing notices on Sept 27, 2013, offering one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 15 days

Sep 5, 2013

Begins

Sep 11, 2013

Discovered

Sep 26, 2013

Filed

vs. sector median

6 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Total System Services, Inc. (TSYS)
norm: total system services inc tsys
Domain: tsys.com

Name: Total System Services, Inc. (TSYS)
norm: total system services inc tsys
Domain: tsys.com
Industry: Financial ServicesllmTechnologyllm

Discovered: Sep 11, 2013
Breach occurred: Sep 5, 2013
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 27, 2013
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Notified federal law enforcement
Third party: via Paragon Benefits, Inc.
Initial access: insider_action

During the incident: Notified federal law enforcement
Offering one year of credit monitoring, call center support and up to $1 million dollars of identity protection insurance through Equifax Personal Solutions at no cost
Advised the three major U.S. credit reporting agencies about this incident
Changes made: Working with Paragon Benefits to improve its data security and management practices to reduce the likelihood of this occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/total-system-services-20130926.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 26, 2013
Raw hash: de0cfa58e38a2544ff6e057e5db8cb3794a8a972b50d04ba9c7eece3c17148fe

Reporting entityTotal System Services, Inc. (TSYS)

Victim entityTotal System Services, Inc. (TSYS)

Incidentdiscovered Sep 11, 2013

Stated responseNotified federal law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov