AccidentalProfessional ServicesProfessional ServicesMisdeliveryCustomer Data InvolvedGovernment IDPIIMediumContained

ROLLINS, INC.

bd_e669af46d400cc4b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 12, 2013

Filed

Mar 27, 2013

To disclose

15 days

Affected

25state residents only

Linked

3 filings

Confidence

66%

Full breach record for ROLLINS, INC. →

Rollins, Inc. notified the NH AG of an inadvertent disclosure of employees' and retirees' SSNs on mailing labels for the 'Rollins TODAY' magazine. The system error occurred during the week of March 4, 2013. Rollins detected the issue on March 12, 2013, and began notifying affected individuals on March 28, 2013. 25 NH residents were affected. Rollins engaged Kroll Advisory Solutions to provide 12 months of credit monitoring and identity theft restoration services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 8 days

discovery → filing · 15 days

Mar 4, 2013

Begins

Mar 12, 2013

Discovered

Mar 27, 2013

Filed

vs. sector median

15 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

California State AGbd_81291e90edfc1fce2013-03-27Candidate
Massachusetts State AGbd_9b9af36aec8bb1492013-04-01 · +5dVerified

Name: ROLLINS, INC.
norm: rollins

Name: ROLLINS, INC.
norm: rollins
Industry: Professional Servicesllm

Discovered: Mar 12, 2013
Breach occurred: Mar 4, 2013 – Mar 10, 2013
Undetected for: 8 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 28, 2013
Affected individuals: 25state-resident count only
Data types: Government IDPII
Data elements: Social Security number
Attack vector: Unknown
Regulator citations: Notified NH Department of Justice

During the incident: Secured the services of Kroll Advisory Solutions to provide identity theft safeguards
Providing no-cost access to Kroll’s credit monitoring service for 12 months
Providing Enhanced Identity Theft Consultation and Restoration
Changes made: Taking corrective measures to help ensure that this type of inadvertent disclosure of personal information does not occur again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 days(15 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

California State AGMar 27 · first

New Hampshire State AGMar 27 · first · this page

Massachusetts State AG+5d

Pattern: first filing Mar 27 (CA), last Apr 1 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/rollins-20130327.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 27, 2013
Raw hash: 852277cd9ca41c51d21f9d48acca51acbf947c02aed9b0a6954f1d2b03c1bb05

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityROLLINS, INC.

Victim entityROLLINS, INC.

Incidentdiscovered Mar 12, 2013

Stated responseSecured the services of Kroll Advisory Solutions to provide identity theft safeguards

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov