HackingTechnologyInformationStolen CredentialsEmployee Data InvolvedIdentity (basic)Financial accountEmploymentLowContained

Applications Software Technology LLC

bd_bb4e794bfe5b7d9c · schema v1 · pii pii-v1

Severity

Low

Discovered

Mar 9, 2020

Filed

Apr 14, 2020

To disclose

5 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

65%

Full breach record for Applications Software Technology LLC →

Applications Software Technology LLC notified the California Attorney General of a data breach occurring on March 9, 2020. An unknown third party accessed an employee's email account, set up forwarding rules, and accessed employee payroll information, specifically 2019 W-2s. The company implemented two-factor authentication and engaged an IT consultant for vulnerability assessment. Identity theft protection was offered to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 9, 2020 → Notified Mar 30, 202021d ✓ CA 60-day OK5 weeks discovery → filing

Incident timeline

discovery → filing · 5 weeks / 36 days

Mar 9, 2020

Begins

Mar 9, 2020

Discovered

Apr 14, 2020

Filed

vs. sector median

14 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Delaware State AGbd_f88e55d5edb0de002020-04-14Verified
Washington State AGbd_a0b299044cb249e62020-04-15 · +1dVerified
Montana State AGbd_9fc486827fc9940e2020-03-16 · +29dVerified
Indiana State AGbd_e186ae4af42d37132020-03-16 · +29dVerified

Show 1 more filing ↓up to 104d gap

Illinois State AGbd_7dfd433adf595b502020-01-01 · +104dCandidate

Name: Applications Software Technology LLC
norm: applications software
Domain: astcorporation.com

Name: Applications Software Technology LLC
norm: applications software
Domain: astcorporation.com
Industry: Technologyllm

Discovered: Mar 9, 2020
Breach occurred: Mar 9, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 30, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountEmployment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Completed full scans of company systems to identify malware and other threats to all employees in the U.S.
Implemented two-factor authentication for HR, accounting, and our company executive team
Rolling out two-factor authentication for all employees
Engaged an outside IT consultant, CORE BTS, to provide a full vulnerability assessment and recommendations concerning our systems
Providing LifeLock DefenderTM Preferred identity theft prevention and mitigation services at no cost to you for a period of 12 months
Changes made: Implemented two-factor authentication for HR, accounting, and our company executive team
Rolling out two-factor authentication for all employees
Engaged an outside IT consultant, CORE BTS, to provide a full vulnerability assessment and recommendations concerning our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: CA 60-day OK · 21d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 9, 2020
→ Notified: Mar 30, 2020
21d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 9, 2020 → Notified: Mar 30, 2020	21d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Illinois State AGJan 1 · first

Montana State AG+75d

Indiana State AG+75d

Delaware State AG+104d

California State AG+104d · this page

Washington State AG+105d

Pattern: first filing Jan 1 (IL), last Apr 15 (WA) — a 105-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-189123
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 14, 2020
Raw hash: dcb100afd817282d6dbe70f98ba139a45b74fa8f35c4e3828b733aa542d0c062

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityApplications Software Technology LLC

Victim entityApplications Software Technology LLC

Incidentdiscovered Mar 9, 2020

Stated responseCompleted full scans of company systems to identify malware and other threats to all employees in the U.S.

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov