HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Enroll Confidently
bd_ef84790f0d05755f · schema v1 · pii pii-v1
Full breach record for Enroll Confidently →Enroll Confidently, Inc. reported that on February 13, 2024, an unauthorized actor gained access to its network and copied certain files containing personal information, including names. The company secured its systems, notified federal law enforcement, and is offering 24 months of credit monitoring to affected individuals. The incident involved customer data from employers and benefits providers using the platform.
California clockDiscovered Feb 13, 2024 → Notified Aug 16, 2024185d ✗ CA 60-day late26 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_05a0ca9b57d9d7ecMontana State AGfiled 2024-08-16Candidate
- bd_4d0bc811d6be7b95Indiana State AGfiled 2024-08-16Verified
- bd_7e214c0dd95ba873New Hampshire State AGfiled 2024-08-16Verified
- bd_fa66a06404b8e67fWashington State AGfiled 2024-08-16Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-590317
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 16, 2024
- Raw hash
- a6ead55269eda864c3eb9157b2fb4d50aba09bb310b4e4d7f0dd4a23295a3cdb
Reporting entity
- Name
- Enroll Confidentlynorm: enroll confidently
Victim entity
- Name
- Enroll Confidentlynorm: enroll confidently
Incident
- Discovered
- Feb 13, 2024
- Materiality determined
- —
- Notification sent
- Aug 16, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 26 weeks(185 days from discovery to filing)
- Compliance flags
- CA 60-day late · 185d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 13, 2024→ Notified: Aug 16, 2024185d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.