Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedTargetedGovernment IDIdentity (basic)Financial accountFinancial credentialsMediumContained

ABM INDUSTRIES INCORPORATED

bd_c4c524cdc6259a5e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 14, 2018

Filed

Mar 19, 2019

To disclose

40 weeks

Affected

23state residents only

Linked

6 filings

Confidence

66%

Full breach record for ABM INDUSTRIES INCORPORATED →6 incidents on file

ABM Industries Incorporated notified the NH AG of a phishing incident affecting 23 NH residents. Unauthorized access to employee email accounts occurred from Jan 8, 2018 to Aug 7, 2018. ABM discovered the incident on June 14, 2018. Data exposed included SSNs, driver's licenses, passport numbers, bank account info, and passwords. ABM reset passwords, engaged forensic experts, notified law enforcement, and provided 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 157 days

discovery → filing · 40 weeks / 278 days

Jan 8, 2018

Begins

Jun 14, 2018

Discovered

Mar 19, 2019

Filed

vs. sector median

+22 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

South Carolina State AGbd_1fbcc407c43af3f12019-03-18 · +1dVerified
Washington State AGbd_2d13cf7462eba6d82019-03-12 · +7dCandidate
California State AGbd_9a61b5d2d310a0dd2019-03-12 · +7dVerified
Massachusetts State AGbd_a10bb6a035eb72d82019-03-12 · +7dVerified

Show 1 more filing ↓up to 7d gap

Oregon State AGbd_ab44d9f2f161fbe72019-03-12 · +7dVerified

Name: ABM INDUSTRIES INCORPORATED
norm: abm industries

Name: ABM INDUSTRIES INCORPORATED
norm: abm industries
Industry: Professional Servicesllm

Discovered: Jun 14, 2018
Breach occurred: Jan 8, 2018 – Aug 7, 2018
Undetected for: 157 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 12, 2019
Affected individuals: 23state-resident count only
Data types: Government IDIdentity (basic)Financial accountFinancial credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney GeneralProvided relevant regulatory notices
Initial access: phishing_link

During the incident: Engaged computer forensics experts
Conducted programmatic and manual review of email accounts
Reset passwords for ABM email accounts
Notified law enforcement
Provided relevant regulatory notices
Provided notification to the three major credit reporting agencies
Secured the affected email accounts
Changes made: Reviewed existing policies and procedures
Provided access to identity protection and credit monitoring services for one year through Kroll
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Implemented multi-factor authentication
Implemented third-party managed security services
Provided company-wide anti-phishing and cyber-security training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 40 weeks(278 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Washington State AGMar 12 · first

California State AGMar 12 · first

Massachusetts State AGMar 12 · first

Oregon State AGMar 12 · first

South Carolina State AG+6d

New Hampshire State AG+7d · this page

Pattern: first filing Mar 12 (WA), last Mar 19 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/abm-industries-20190319.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 19, 2019
Raw hash: 0855dc85c5049b4350fb19fb52e7c1bf9c4ffcb58f64f9570e0e79b2115f1143

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityABM INDUSTRIES INCORPORATED

Victim entityABM INDUSTRIES INCORPORATED

Incidentdiscovered Jun 14, 2018

Stated responseEngaged computer forensics experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov