HackingProfessional ServicesProfessional ServicesCapture Stored DataData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)LowContained

Jani-King International, Inc.

bd_d229523a0df030d8 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 16, 2025

To disclose

—

Affected

Not disclosed

Linked

7 filings

Confidence

64%

Full breach record for Jani-King International, Inc. →4 incidents on file

Jani-King International, Inc. notified affected individuals of a data breach in which an unauthorized third party accessed and copied files from certain segments of the company's network between November 26, 2024 and December 21, 2024. The breach affected personal information of franchise owners, purchasers, and franchisee employees. A data review concluded March 17, 2025. Affected individuals were offered complimentary Equifax credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 26, 2024

Begins

Apr 16, 2025

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_4905945b17c3c3d22025-04-16Verified
Vermont State AGbd_76a3add9fbd2ab7d2025-04-16Verified
Montana State AGbd_ab6f1b45987c2eac2025-04-16Candidate
Nebraska State AGbd_b0c597087df90c792025-04-16Verified

Show 2 more filings ↓up to 1d gap

New Hampshire State AGbd_d370120d43aa41e02025-04-16Verified
Massachusetts State AGbd_37b33954b068d4d02025-04-17 · +1dVerified

Name: Jani-King International, Inc.
norm: jani king

Name: Jani-King International, Inc.
norm: jani king
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Nov 26, 2024 – Dec 21, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1074 Data StagedT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified federal law enforcement authorities of the incident

During the incident: Worked closely with forensic consultants to investigate, contain, and remediate the incident
Confirmed the security of our network environment
Promptly notified federal law enforcement authorities of the incident
Wiped and rebuilt affected systems
Arranged for complimentary credit monitoring service through Equifax for affected individuals
Changes made: Implemented additional security measures to further enhance the privacy and security of information stored on our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGApr 16 · first

Vermont State AGApr 16 · first

Montana State AGApr 16 · first

Nebraska State AGApr 16 · first

New Hampshire State AGApr 16 · first

California State AGApr 16 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-601515
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 16, 2025
Raw hash: e2f9fd705484cbb2294ba0e4b8578bc353c73869900010bec956efe2a9b8dcdd

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityJani-King International, Inc.

Victim entityJani-King International, Inc.

IncidentUnauthorized Access

Stated responseWorked closely with forensic consultants to investigate, contain, and remediate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov