HackingTechnologyEducationInformationPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryEducationIdentity (basic)Government IDHighContained

PCS Revenue Control Systems

bd_e9a0ea9bb2a847cf · schema v1 · pii pii-v1

Severity

High

Discovered

Dec 20, 2019

Filed

Mar 17, 2021

To disclose

15 months

Affected

11,807state residents only

Linked

8 filings

Confidence

69%

Full breach record for PCS Revenue Control Systems →

PCS Revenue Control Systems disclosed a phishing-based breach affecting 11,807 Washington residents. Unauthorized access occurred to a server belonging to acquired entity ABT, exposing names, student IDs, and potentially SSNs/DOB. Incident discovered Dec 2019; notifications mailed March 2021. Remediation included patching, password resets, and credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d15 months discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 15 months / 453 days

Dec 19, 2019

Begins

Dec 20, 2019

Discovered

Mar 17, 2021

Filed

vs. sector median

+46 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Maine State AGbd_1dc0d807a471a3d72021-03-18 · +1dVerified
Indiana State AGbd_31c1f0880d3cf3352021-03-18 · +1dVerified
Massachusetts State AGbd_4a48dc3dd25ae2512021-03-18 · +1dVerified
California State AGbd_da001f201405ed7b2021-03-22 · +5dVerified

Show 3 more filings ↓up to 7d gap

South Carolina State AGbd_03f77aabfad570132021-03-24 · +7dVerified
Montana State AGbd_d34337a919ae5f452021-03-24 · +7dVerified
New Hampshire State AGbd_f54cfe9cb5eb18832021-03-24 · +7dVerified

Name: PCS Revenue Control Systems
norm: pcs revenue control
Domain: pcsrcs.com

Name: PCS Revenue Control Systems
norm: pcs revenue control
Domain: pcsrcs.com
Industry: TechnologyllmEducationllm

Discovered: Dec 20, 2019
Breach occurred: Dec 19, 2019
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Mar 17, 2021
Affected individuals: 11,807state-resident count only
Data types: EducationIdentity (basic)Government ID
Data elements: NameSocial Security numberDate of birthStudent ID number
WA-stated cause: Cyberattack
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Office of the Attorney General
Initial access: phishing_link

During the incident: Engaged third-party forensics experts to investigate
Took impacted server offline
Secured its network
Conducted vulnerability scans
Patched systems
Reset passwords
Reviewed access privileges
Conducted employee training
Cooperating with law enforcement
Offering 12 months of complimentary credit monitoring and identity theft protection services
Established a dedicated member support hotline
Changes made: Conducted vulnerability scans
Patched systems
Reset passwords
Reviewed access privileges
Employee training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(453 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Washington State AGMar 17 · first · this page

Maine State AG+1d

Indiana State AG+1d

Massachusetts State AG+1d

California State AG+5d

South Carolina State AG+7d

Montana State AG+7d

New Hampshire State AG+7d

Pattern: first filing Mar 17 (WA), last Mar 24 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10428.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 17, 2021
Raw hash: 8ed8a4286073adf8d603421ff9359bfb6940ccfec1e6ebeb450a29a1d1d065f0

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityPCS Revenue Control Systems

Victim entityPCS Revenue Control Systems

Incidentdiscovered Dec 20, 2019

Stated responseEngaged third-party forensics experts to investigate

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com