Social EngineeringTelecom & MediaInformationPhishingBECTargetedEmployee Data InvolvedGovernment IDFinancial accountEmploymentHighContained

Los Angeles Philharmonic Association

bd_028ce207da6a15b7 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 14, 2018

Filed

Feb 20, 2018

To disclose

6 days

Affected

2,362state residents only

Linked

2 filings

Confidence

66%

Full breach record for Los Angeles Philharmonic Association →2 incidents on file

On February 14, 2018, the Los Angeles Philharmonic was the victim of a spear-phishing email attack where an individual spoofed the CFO's email address to request 2017 employee W-2 forms. The fraudulent request was fulfilled before detection. The incident affected 2,362 California residents (current and former employees). The organization provided credit monitoring, identity restoration services, and notified the FBI, IRS, and state tax authorities.

J jump to incidentP pin to compareR raw source

California clockDiscovered Feb 14, 2018 → Notified Feb 15, 20181d ✓ CA 60-day OK6 days discovery → filing

Incident timeline

discovery → filing · 6 days

Feb 14, 2018

Begins

Feb 14, 2018

Discovered

Feb 20, 2018

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_077254dd190e220f2018-02-20Verified

Name: Los Angeles Philharmonic Association
norm: los angeles philharmonic

Name: Los Angeles Philharmonic Association
norm: los angeles philharmonic
Industry: Telecom & Mediallm

Discovered: Feb 14, 2018
Breach occurred: Feb 14, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 15, 2018
Affected individuals: 2,362state-resident count only
Data types: Government IDFinancial accountEmployment
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Notified the IRSNotified state tax authoritiesNotified the FBI
Initial access: phishing_link

During the incident: Provided preliminary notice to current employees via email
Provided written notice to all affected current and former employees
Provided two free years of credit and identity monitoring services through Epiq
Established a dedicated hotline for potentially affected individuals
Provided guidance on how to better protect against identity theft and fraud
Provided notice to other state regulators as necessary
Provided notice to the IRS, state tax authorities, and the FBI
Changes made: Continue to provide information security awareness and training programs for all employees
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 days(6 days from discovery to filing)
Compliance flags: CA 60-day OK · 1d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Feb 14, 2018
→ Notified: Feb 15, 2018
1d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Feb 14, 2018 → Notified: Feb 15, 2018	1d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGFeb 20 · first

California State AGFeb 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-133932
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 20, 2018
Raw hash: 91f497425fa1a1ca57b4035aee4a6addc060009f4084ac3516d65dfc2c2dd7b2

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLos Angeles Philharmonic Association

Victim entityLos Angeles Philharmonic Association

Incidentdiscovered Feb 14, 2018

Stated responseProvided preliminary notice to current employees via email

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov