HackingProfessional ServicesProfessional ServicesDelayed DiscoveryPIIIdentity (basic)LowContained

PRGX Global Inc.

bd_e7713c5b4bdd09ef · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 9, 2022

Filed

May 15, 2023

To disclose

13 months

Affected

26state residents only

Linked

9 filings

Confidence

66%

Full breach record for PRGX Global Inc. →

PRGX Global, Inc. notified the New Hampshire Attorney General of a data event affecting 26 NH residents. Unauthorized access occurred between April 8-9, 2022. PRGX discovered the incident on April 9, 2022, and notified residents on May 8, 2023. Personal information was potentially accessed. PRGX engaged forensic specialists, notified law enforcement, and provided 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d13 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 13 months / 401 days

Apr 8, 2022

Begins

Apr 9, 2022

Discovered

May 15, 2023

Filed

vs. sector median

+40 wks slower

This filing is one of 9 about the same incident.View merged incident

A leak claim by black_basta about this victim predates this filing by 378 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblack_bastabd_c7e69469f73f917c2022-05-02 · +378dCandidate

Regulatory filings (7) · sorted by filing gap

Maine State AGbd_38b28bacd74ba15e2023-05-08 · +7dVerified
Massachusetts State AGbd_4a40c687b4cb13742023-05-08 · +7dVerified
Vermont State AGbd_642941611432b30c2023-05-08 · +7dVerified
California State AGbd_a2656e2f8f69ab892023-05-08 · +7dVerified

Show 3 more filings ↓up to 134d gap

Indiana State AGbd_c4dc863dbd41eb672023-05-08 · +7dVerified
Montana State AGbd_e7a9a10bf5efc9002023-05-08 · +7dVerified
Illinois State AGbd_2188bba8c5f04dd52023-01-01 · +134dCandidate

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: PRGX Global Inc.
norm: prgx global
Industry: Professional Servicesllm

Discovered: Apr 9, 2022
Breach occurred: Apr 8, 2022 – Apr 9, 2022
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: May 8, 2023
Affected individuals: 26state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External
Regulator citations: Notified federal law enforcementProviding written notice of this incident to relevant state regulators

During the incident: Took steps to secure its systems
Launched an investigation with the assistance of cyber incident response specialists
Promptly reported the event to federal law enforcement
Undertook a comprehensive and time-intensive review of the potentially affected files with the assistance of forensic data review specialists
Worked to validate the results of the review and determine address information for impacted individuals
Changes made: Implemented several additional safeguards
Enhanced training to its employees
Providing access to credit monitoring services for one (1) year through IDX
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(401 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Illinois State AGJan 1 · first

Maine State AG+127d

Massachusetts State AG+127d

Vermont State AG+127d

California State AG+127d

Indiana State AG+127d

Montana State AG+127d

New Hampshire State AG+134d · this page

Pattern: first filing Jan 1 (IL), last May 15 (NH) — a 134-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/prgx-global-20230515.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 15, 2023
Raw hash: 6dd9308ee126f0b944ca339c5ebc212aea9a7e416c08fc24e4b1bce7c36f8c7c

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityPRGX Global Inc.

Incidentdiscovered Apr 9, 2022

Stated responseTook steps to secure its systems

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov