HackingTechnologyEducationInformationStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDPIIMediumContained

PCS Revenue Control Systems

bd_d34337a919ae5f45 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 19, 2019

Filed

Mar 24, 2021

To disclose

15 months

Affected

32state residents only

Linked

8 filings

Confidence

67%

Full breach record for PCS Revenue Control Systems →

PCS Revenue Control Systems, Inc. notified Montana AG of unauthorized access to a server belonging to Advanced Business Technologies (acquired by PCS in 2016) on Dec 19, 2019. Data potentially included names, student IDs, SSNs, and DOBs. PCS engaged forensic experts, secured the network, and offered one year of Kroll identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 months / 461 days

Dec 19, 2019

Discovered

Mar 24, 2021

Filed

vs. sector median

+47 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

South Carolina State AGbd_03f77aabfad570132021-03-24Verified
New Hampshire State AGbd_f54cfe9cb5eb18832021-03-24Verified
California State AGbd_da001f201405ed7b2021-03-22 · +2dVerified
Maine State AGbd_1dc0d807a471a3d72021-03-18 · +6dVerified

Show 3 more filings ↓up to 7d gap

Indiana State AGbd_31c1f0880d3cf3352021-03-18 · +6dVerified
Massachusetts State AGbd_4a48dc3dd25ae2512021-03-18 · +6dVerified
Washington State AGbd_e9a0ea9bb2a847cf2021-03-17 · +7dCandidate

Name: PCS Revenue Control Systems
norm: pcs revenue control

Name: PCS Revenue Control Systems
norm: pcs revenue control
Industry: TechnologyllmEducationllm

Discovered: Dec 19, 2019
Materiality determined: —
Notification sent: —
Affected individuals: 32state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Acted to secure its network
Engaged third-party forensics experts to investigate the situation
Conducted a thorough review of PCS systems and processes
Acted to further strengthen existing security systems and processes
Secured the services of Kroll to provide identity monitoring
Changes made: Strengthened existing security systems and processes
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(461 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Washington State AGMar 17 · first

Maine State AG+1d

Indiana State AG+1d

Massachusetts State AG+1d

California State AG+5d

South Carolina State AG+7d

New Hampshire State AG+7d

Montana State AG+7d · this page

Pattern: first filing Mar 17 (WA), last Mar 24 (MT) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/PCS-Revenue-Ad-TA-SSN-r1prf.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 24, 2021
Raw hash: 82975b744cbebdf6938ae8ac80f0998d66b818e3e0bebf505c393e22f338efdb

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityPCS Revenue Control Systems

Victim entityPCS Revenue Control Systems

Incidentdiscovered Dec 19, 2019

Stated responseActed to secure its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov