Educators Benefit Consultants
bd_bed2b498773eb8af · schema v1 · pii pii-v1
Full breach record for Educators Benefit Consultants →Educators Benefit Consultants, LLC (d/b/a Aviben) disclosed a data security incident detected on February 22, 2024, involving unauthorized access to its network between February 21-23, 2024. The breach resulted from a zero-day vulnerability in software used by an external IT provider. Affected data may include names, Social Security numbers, dates of birth, driver's license numbers, financial account numbers, military IDs, and passport numbers. The company engaged forensic investigators, secured its network, and is offering 12 months of credit monitoring and fraud assistance to affected individuals.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_156a0df346c25eb8New Hampshire State AGfiled 2024-08-09Verified
- bd_666bd5f5986b6cdbVermont State AGfiled 2024-08-06(3d gap)Verified
- bd_dca76ae94ac8f064Indiana State AGfiled 2024-08-06(3d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-590046
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 9, 2024
- Raw hash
- 9c62e322537b418081d52e297a608561a0fe75cdff97749045a3d2bba548bdaa
Reporting entity
- Name
- Educators Benefit Consultantsnorm: educators benefit consultants
Victim entity
- Name
- Educators Benefit Consultantsnorm: educators benefit consultants
Incident
- Discovered
- Feb 22, 2024
- Materiality determined
- —
- Notification sent
- Aug 6, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via external IT provider
- Initial access
- supply_chain
Compliance
- Time to disclose
- 24 weeks(169 days from discovery to filing)
- Compliance flags
- CA 60-day late · 166d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 22, 2024→ Notified: Aug 6, 2024166d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.