HackingTechnologyInformationStolen CredentialsSupply Chain (3P Vendor)Employee Data InvolvedData ExfiltratedIdentity (basic)Government IDEmploymentMediumContained

Sorenson Communications, Inc.

bd_c0ae7412fd39780e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 7, 2014

Filed

Mar 27, 2014

To disclose

20 days

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Sorenson Communications, Inc. →

Sorenson Communications disclosed unauthorized access to employee HR data via a third-party payroll vendor between Feb 20 and Mar 3, 2014. The incident, discovered on Mar 7, 2014, exposed names, SSNs, DOBs, addresses, and income history. Sorenson engaged the FBI and IRS, implemented additional security, and provided credit monitoring to affected employees.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 7, 2014 → Notified Mar 21, 201414d ✓ CA 60-day OK20 days discovery → filing

Incident timeline

undetected · 15 days

discovery → filing · 20 days

Feb 20, 2014

Begins

Mar 7, 2014

Discovered

Mar 27, 2014

Filed

vs. sector median

8 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_358559274fb1c6f42014-03-25 · +2dVerified

Name: Sorenson Communications, Inc.
norm: sorenson communications

Name: Sorenson Communications, Inc.
norm: sorenson communications
Industry: Technologyllm

Discovered: Mar 7, 2014
Breach occurred: Feb 20, 2014 – Mar 3, 2014
Undetected for: 15 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 21, 2014
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDEmployment
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Investigating with the Federal Bureau of Investigation (FBI)Investigating with the Internal Revenue Service (IRS)
Third party: via Payroll vendor
Initial access: supply_chain

During the incident: Investigating this incident with the Federal Bureau of Investigation (FBI) and the Internal Revenue Service (IRS)
Implemented additional levels of security
Providing credit and identity theft protection through Experian Corporation
Providing a prepaid, one-year membership to Experian's ProtectMyID Alert service
Reimbursing employees for the cost of security freezes
Changes made: Implemented additional levels of security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 days(20 days from discovery to filing)
Compliance flags: CA 60-day OK · 14d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 7, 2014
→ Notified: Mar 21, 2014
14d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 7, 2014 → Notified: Mar 21, 2014	14d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGMar 25 · first

California State AG+2d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-44635
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 27, 2014
Raw hash: 25176f117097323d586f89c17f6f4f9d6c55fa5c7c458766d45f899763ed461b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySorenson Communications, Inc.

Victim entitySorenson Communications, Inc.

Incidentdiscovered Mar 7, 2014

Stated responseInvestigating this incident with the Federal Bureau of Investigation (FBI) and the Internal Revenue Service (IRS)

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov