HackingProfessional ServicesTechnologyProfessional ServicesStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)LowContained

Certified Employment Screening Inc.

bd_c9273a019b67f0da · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 29, 2024

Filed

Dec 13, 2024

To disclose

6 weeks

Affected

11state residents only

Linked

3 filings

Confidence

66%

Full breach record for Certified Employment Screening Inc. →3 incidents on file

Certified Employment Screening Inc. d/b/a Americhek notified the NH Attorney General of a data security incident involving its vendor, BackChecked LLC. Unauthorized access occurred on September 26, 2024. Americhek was notified on October 29, 2024, and determined personal information of applicants was impacted. 11 New Hampshire residents were notified on December 13, 2024. Identity protection services were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 33 days

discovery → filing · 6 weeks / 45 days

Sep 26, 2024

Begins

Oct 29, 2024

Discovered

Nov 21, 2024

Scope determined

Dec 13, 2024

Filed

vs. sector median

11 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Vermont State AGbd_339bfb31c634d2932024-12-13Candidate
Massachusetts State AGbd_e745bf85d03ba1962024-12-13Verified

Name: Certified Employment Screening Inc.
norm: certified employment screening

Name: Certified Employment Screening Inc.
norm: certified employment screening
Industry: Professional ServicesllmTechnologyllm

Discovered: Oct 29, 2024
Breach occurred: Sep 26, 2024
Undetected for: 33 daysoccurrence → discovery
Materiality determined: Nov 21, 2024
Notification sent: Dec 13, 2024
Affected individuals: 11state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Attorney General John Formella, Consumer Protection Bureau
Third party: via BackChecked LLC
Initial access: valid_credentials

During the incident: BackChecked took steps to investigate and terminate any further unauthorized access to its systems
Americhek began assessing the scope of the potentially impacted data
Americhek conducted a thorough review of the types of personal information impacted
Americhek identified potentially affected individuals
Americhek verified current mailing addresses for those individuals
Americhek notified eleven (11) New Hampshire residents of this incident via first class U.S. mail
Americhek is offering complimentary credit and identity protection services to all notified individuals
Changes made: Offering complimentary credit and identity protection services to all notified individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(45 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Vermont State AGDec 13 · first

Massachusetts State AGDec 13 · first

New Hampshire State AGDec 13 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/certified-employment-screening-americhek-backchecked-20241213.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 13, 2024
Raw hash: 60f31177934c144ca22b5f0f6722597ca9bbff6ff200a6582efe347f9c646c6a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCertified Employment Screening Inc.

Victim entityCertified Employment Screening Inc.

Incidentdiscovered Oct 29, 2024

Stated responseBackChecked took steps to investigate and terminate any further unauthorized access to its systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov