HackingVulnerability ExploitCapture Stored DataData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTCriticalContained
Payroll Management, Inc
bd_e1bac4ea83395550 · schema v1 · pii pii-v1
Full breach record for Payroll Management, Inc →Paytime, Inc., a payroll services provider, disclosed a 2014 data breach where hackers exploited a vulnerability in its Client Service Center. The incident occurred on April 7, 2014, and was detected on April 30, 2014. The breach compromised the personal and financial information of approximately 230,000 individuals, including names, addresses, dates of birth, phone numbers, hire dates, and Social Security numbers. Paytime engaged forensic investigators and law enforcement, and notified affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed230,000 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/paytime-20140630.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2014
- Raw hash
- 6a0c1811d97478f93ec379845203327ca43af4de06a7713eab677d3901c9b0ee
Reporting entity
- Name
- Payroll Management, Incnorm: payroll management
- Domain
- payrollmgt.com
Victim entity
- Name
- Payroll Management, Incnorm: payroll management
- Domain
- payrollmgt.com
Incident
- Discovered
- Apr 30, 2014
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- 230,000
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General's Office
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 9 weeks(61 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.