DisclosureLens
HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)MediumContained

Tower Administrative Services

bd_ce9bb1cdd6ea4588 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 4, 2026

Filed

Jun 26, 2026

To disclose

20 weeks

Affected

3,427state residents only

Linked

10 filings

Confidence

64%
Full breach record for Tower Administrative Services →

Tower Administrative Services, Inc. notified South Carolina residents of a data breach involving unauthorized access to corporate network systems on or around February 3, 2026. Suspicious activity was identified on February 4, 2026. The incident potentially exposed names combined with other data elements. Tower engaged third-party specialists, secured systems, and implemented technical safeguards. Affected individuals were offered complimentary credit monitoring and identity protection services for a specified period. No evidence of misuse was found at the time of notification.

South Carolina clock✓ SC CRA notice due20 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days
discovery → filing · 20 weeks / 142 days

Feb 3, 2026

Begins

Feb 4, 2026

Discovered

Jun 26, 2026

Filed

vs. sector median

+1 wks slower

This filing is one of 10 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Show 5 more filings ↓up to 3d gap

Filing propagation · 10 filings · 10 states

View merged incident ↗
Nebraska State AGJun 23 · first
Indiana State AGJun 23 · first
California State AG+2d
Washington State AG+3d
Massachusetts State AG+3d
Texas State AG+3d
New Hampshire State AG+3d
Vermont State AG+3d
South Carolina State AG+3d · this page
Oregon State AG+6d

Pattern: first filing Jun 23 (NE), last Jun 29 (OR) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.