HackingTelecom & MediaInformationCustomer Data InvolvedIdentity (basic)LowContained

Pacific Symphony

bd_09ec321064b24e00 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 21, 2025

Filed

Nov 10, 2025

To disclose

12 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Pacific Symphony →

Pacific Symphony notified the California Attorney General of a cybersecurity incident on August 21, 2025, where an unauthorized third party accessed part of its IT network. The organization terminated access and engaged forensic experts. Investigation determined the actor had the opportunity to extract data, including full names and other personal information. No evidence of actual misuse was found. Affected individuals were offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 81 days

Aug 21, 2025

Begins

Aug 21, 2025

Discovered

Nov 10, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Pacific Symphony
norm: pacific symphony
Domain: pacificsymphony.org

Name: Pacific Symphony
norm: pacific symphony
Domain: pacificsymphony.org
Industry: Telecom & Mediallm

Discovered: Aug 21, 2025
Breach occurred: Aug 21, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Terminated the unauthorized access and resecured the network
Engaged third-party cybersecurity experts
Launched a comprehensive investigation to determine the scope and potential impact
Conducted an extensive document review process, which involved hand reviewing individual documents
Offering 12 months of free credit monitoring and $1 million in identity theft insurance through Experian
Changes made: Continuing to take steps to enhance its security measures to help prevent something like this from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(81 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-614068
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 10, 2025
Raw hash: 420a5a40cfdca12387fc8bf4a76ab6117083b657d3361854367465cb9fe981e5

Reporting entityPacific Symphony

Victim entityPacific Symphony

Incidentdiscovered Aug 21, 2025

Stated responseTerminated the unauthorized access and resecured the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov