HackingSupply Chain (3P Vendor)Data ExfiltratedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
The Job Shop
bd_ba02f7d402adfba1 · schema v1 · pii pii-v1
Full breach record for The Job Shop →Forest & Einstein Staffing, Inc. (d/b/a The Job Shop) disclosed that an unknown threat actor gained unauthorized access to its data server via a third-party IT services provider around mid-June 2025. The actor may have exfiltrated personal information of temporary workers, including names, email addresses, mailing addresses, and Social Security Numbers. The company retained legal counsel, secured the server, and offered 24 months of credit monitoring.
Leak gap clock⏱ Leak >90d11 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_8ae50d7df500b7bfCalifornia State AGfiled 2025-09-29(32d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-613689
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 31, 2025
- Raw hash
- f70c442b96832d9bc9bb5fd7078c183e356645299eb8121bf505d51a7ac8f32f
Reporting entity
- Name
- The Job Shopnorm: the job shop
- Domain
- jobshopsf.com
Victim entity
- Name
- The Job Shopnorm: the job shop
- Domain
- jobshopsf.com
Incident
- Discovered
- Aug 14, 2025
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Third party
- via IT services provider
- Initial access
- supply_chain
Compliance
- Time to disclose
- 11 weeks(78 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.