DisclosureLens
HackingTechnologyInformationCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDEmploymentMediumContained

SyncHR, Inc.

bd_fa943e46a31a4348 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 23, 2017

Filed

Oct 6, 2017

To disclose

6 weeks

Affected

2scope not determined

Confidence

66%
Full breach record for SyncHR, Inc.

SyncHR, Inc. notified California residents that a report containing employee benefit information was temporarily accessible by HR administrators of other customers. On August 23, 2017, SyncHR became aware of the error and promptly deactivated the report. Two individuals confirmed access to the report containing their information, including name, address, date of birth, SSN, and employment details. SyncHR confirmed the data was deleted from the customers' environments and not misused. The company is offering one year of Experian IdentityWorks.

Incident timeline

discovery → filing · 6 weeks / 44 days

Aug 23, 2017

Discovered

Oct 6, 2017

Filed

vs. sector median

12 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.