South Carolina Department of Revenue
ent_e0ea6119935b2c421dbf0793
Disclosures
3
State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
2,136
as filed · State AG HI
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- South Carolina Department of Revenue
- Normalized
- south carolina department of revenue— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- California State AGas victim2012-12-10
The South Carolina Department of Revenue suffered a data breach in September 2012, discovered in October 2012. An attacker gained initial access via a phishing email sent to employees in August 2012, stealing credentials. The attacker used these credentials to access the network via Citrix, dumped passwords, and exfiltrated approximately 74.7 GB of data, including tax returns, SSNs, and financial information, between September 1 and September 15, 2012. The incident was contained in October 2012. Affected individuals were offered credit monitoring.
- Hawaii State AGas victim2012-11-28
South Carolina Dept of Revenue notified Hawaii OCP of a September 2012 breach exposing tax returns, SSNs, and financial data. Mandiant forensics confirmed access. ~2,136 Hawaii residents affected. Contained; credit monitoring offered.
- New Hampshire State AGas victim2012-11-26
South Carolina Department of Revenue notified NH AG of a Sept 2012 breach exposing e-filed tax returns (1998-present) including SSNs and financial data. ~1,445 NH residents affected. Secret Service investigating. Breach contained; credit monitoring offered.