HackingData ExfiltratedSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumActive

Kroll Background Screening Services (Kroll)

bd_d1c97559aca93f13 · schema v1 · pii pii-v1

Full breach record for Kroll Background Screening Services (Kroll) →

Kroll Background Screening Services experienced a data incident in 2013 where third parties targeted its systems to obtain background check information. The intrusion occurred between June and September 2013. Marsh & McLennan Companies, Inc. notified affected individuals, whose personal information (including SSN, address, and employment history) may have been on Kroll servers. No evidence was found that data was taken, but credit protection services were offered.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-43389
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2013
Raw hash: dcb7d5e521ba87bfc401b99a702217f271d47eb53141c926bd90988c251e60d7

Reporting entity

Name: MARSH & MCLENNAN COMPANIES, INC.
norm: marsh mclennan companies

Victim entity

Name: Kroll Background Screening Services (Kroll)
norm: kroll background screening services kroll

Incident

Discovered: Sep 25, 2013
Materiality determined: —
Notification sent: Jun 13, 2013
Affected individuals: Not disclosed
Data types: IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified state regulators and law enforcement officials
Initial access: exploit_public_facing

Compliance

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.