HackingEducationTechnologyEducationStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

PCS Revenue Control Systems

bd_f54cfe9cb5eb1883 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 19, 2019

Filed

Mar 24, 2021

To disclose

15 months

Affected

47state residents only

Linked

8 filings

Confidence

67%

Full breach record for PCS Revenue Control Systems →

PCS Revenue Control Systems notified New Hampshire AG of unauthorized access to a server belonging to acquired entity Advanced Business Technologies. The incident, discovered Dec 19, 2019, exposed names, student IDs, and potentially SSNs/DOB of 47 NH residents. Notifications were mailed in March 2021, offering credit monitoring. No malicious use was detected.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 15 months / 461 days

Dec 19, 2019

Discovered

Mar 24, 2021

Filed

vs. sector median

+57 wks slower

This filing is one of 8 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

South Carolina State AGbd_03f77aabfad570132021-03-24Verified
Montana State AGbd_d34337a919ae5f452021-03-24Verified
California State AGbd_da001f201405ed7b2021-03-22 · +2dVerified
Maine State AGbd_1dc0d807a471a3d72021-03-18 · +6dVerified

Show 3 more filings ↓up to 7d gap

Indiana State AGbd_31c1f0880d3cf3352021-03-18 · +6dVerified
Massachusetts State AGbd_4a48dc3dd25ae2512021-03-18 · +6dVerified
Washington State AGbd_e9a0ea9bb2a847cf2021-03-17 · +7dCandidate

Name: PCS Revenue Control Systems
norm: pcs revenue control
Domain: pcsrcs.com

Name: PCS Revenue Control Systems
norm: pcs revenue control
Domain: pcsrcs.com
Industry: EducationllmTechnologyllm

Discovered: Dec 19, 2019
Materiality determined: —
Notification sent: Mar 17, 2021
Affected individuals: 47state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of Attorney General, Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Engaged third-party forensics experts to investigate the situation
Took the impacted server offline
Secured its network
Cooperating with law enforcement regarding their investigations
Offering 12 months of complimentary credit monitoring and identity theft protection services
Established a dedicated member support hotline
Changes made: Conducted a thorough review of PCS systems and processes
Strengthened existing security systems and processes
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 months(461 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Washington State AGMar 17 · first

Maine State AG+1d

Indiana State AG+1d

Massachusetts State AG+1d

California State AG+5d

South Carolina State AG+7d

Montana State AG+7d

New Hampshire State AG+7d · this page

Pattern: first filing Mar 17 (WA), last Mar 24 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/pcs-revenue-control-systems-20210324.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 24, 2021
Raw hash: e591ea64881fc539027f1f897ccac5bf20700c34d343f990a8f7f97cbde21c73

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entityPCS Revenue Control Systems

Victim entityPCS Revenue Control Systems

Incidentdiscovered Dec 19, 2019

Stated responseEngaged third-party forensics experts to investigate the situation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov