Social EngineeringPhishingStolen CredentialsEmployee Data InvolvedIDENTITY_BASICPIILowContained
ABM INDUSTRIES INCORPORATED
bd_f80a28581ac11e35 · schema v1 · pii pii-v1
Full breach record for ABM INDUSTRIES INCORPORATED →ABM Industries Incorporated reported a phishing incident where employees clicked on malicious emails and entered credentials, allowing an unknown actor to access certain email accounts. The breach affected 101 Rhode Island residents, exposing identity information such as names. ABM engaged forensic investigators, secured affected accounts, and offered one year of identity monitoring through Kroll.
California clockDiscovered Aug 1, 2017 → Notified Nov 17, 2017108d ✗ CA 60-day late15 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_8a28a6a8e4127848Oregon State AGfiled 2017-11-14Candidate
- bd_6c8dcccf4b14c544Montana State AGfiled 2018-03-08(114d gap)Verified
- bd_b8f108d99f25919cWashington State AGfiled 2018-03-08(114d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-104263
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 14, 2017
- Raw hash
- 15b3341c7f9327001889254f714931d3e46978f148e9db64a9d535849dfc7d12
Reporting entity
- Name
- ABM INDUSTRIES INCORPORATEDnorm: abm industries
Victim entity
- Name
- ABM INDUSTRIES INCORPORATEDnorm: abm industries
Incident
- Discovered
- Aug 1, 2017
- Materiality determined
- —
- Notification sent
- Nov 17, 2017
- Affected individuals
- 101
- Data types
- IDENTITY_BASICPII
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Provided notice to certain regulators and consumer reporting agencies
- Initial access
- phishing_link
Compliance
- Time to disclose
- 15 weeks(105 days from discovery to filing)
- Compliance flags
- CA 60-day late · 108d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 1, 2017→ Notified: Nov 17, 2017108d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.