AccidentalMisconfigurationCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTPIILowContained
The Day & Zimmermann Group
bd_db75b17f5334fe3d · schema v1 · pii pii-v1
Full breach record for The Day & Zimmermann Group →Day & Zimmermann notified employees of a potential data exposure in its SuccessFactors HR system due to a misconfiguration. Between Sept 8-10, 2023, settings allowed employees to view other employees' data (addresses, bank info, tax info) if they intentionally searched for it. 116 employees logged in during the window. No evidence of misuse found. TransUnion credit monitoring offered.
Vermont clock⏱ VT AG >14 bday23 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_3bb21af21bdec7aaMaine State AGfiled 2023-10-02Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-10-02-day-zimmermann-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 2, 2023
- Raw hash
- 6717e440ea0a9b56895aa4ebe71f02654f8bcae0f0452dccf054c85fc2845d00
Reporting entity
- Name
- The Day & Zimmermann Groupnorm: the day zimmermann
Victim entity
- Name
- The Day & Zimmermann Groupnorm: the day zimmermann
Incident
- Discovered
- Sep 8, 2023
- Materiality determined
- —
- Notification sent
- Oct 2, 2023
- Affected individuals
- 116
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNTPII
- Attack vector
- Misconfiguration
- MITRE ATT&CK
- T1530 Data from Cloud Storage Object
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- VT AG >14 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.