Bamboo HR LLC

On February 28, 2019, the California Office of the Attorney General reported a data breach involving Bamboo HR LLC that occurred between February 11 and February 13, 2019. The breach involved unauthorized access to the TraxPayroll system, potentially exposing names, social security numbers, states of residence, states of employment, wage types, and tax type codes of certain employees. The number of individuals affected is currently unknown.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-145100

TPRM report: https://www.rankiteo.com/company/bamboohr

"id": "bam918072825",
"linkid": "bamboohr",
"type": "Breach",
"date": "2/2019",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Human Resources',
                        'name': 'Bamboo HR LLC',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'social security numbers',
                                              'states of residence',
                                              'states of employment',
                                              'wage types',
                                              'tax type codes']},
 'date_detected': '2019-02-28',
 'date_publicly_disclosed': '2019-02-28',
 'description': 'Unauthorized access to the TraxPayroll system, potentially '
                'exposing personal information of certain employees.',
 'impact': {'data_compromised': ['names',
                                 'social security numbers',
                                 'states of residence',
                                 'states of employment',
                                 'wage types',
                                 'tax type codes'],
            'systems_affected': ['TraxPayroll system']},
 'references': [{'date_accessed': '2019-02-28',
                 'source': 'California Office of the Attorney General'}],
 'title': 'Bamboo HR LLC Data Breach',
 'type': 'Data Breach'}