MalwareGovernmentGovernmentRansomwareData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

City of Torrance

bd_0c4c959bdeea15ee · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 1, 2020

Filed

Oct 21, 2020

To disclose

33 weeks

Affected

1state residents only

Linked

8 filings

Confidence

67%

Full breach record for City of Torrance →

The City of Torrance, California, notified the New Hampshire Attorney General of a ransomware incident discovered on March 1, 2020. The attack resulted in the exfiltration and public posting of non-employee data, including names, SSNs, driver's license numbers, and financial account information. Only one New Hampshire resident was identified and notified on October 13, 2020. The City engaged forensic investigators and law enforcement, and implemented technical safeguards.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d33 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

discovery → filing · 33 weeks / 234 days

Mar 1, 2020

Discovered

Oct 21, 2020

Filed

vs. sector median

+23 wks slower

This filing is one of 8 about the same incident.View merged incident

A leak claim by doppelpaymer about this victim predates this filing by 234 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitedoppelpaymerbd_d82eb43ce1b2e1632020-03-01 · +234dVerified by operator

Regulatory filings (6) · sorted by filing gap

California State AGbd_16c8e764e7e05e932020-10-18 · +3dVerified by operator
Maine State AGbd_2b3c67d52d445c282020-10-18 · +3dVerified by operator
Indiana State AGbd_8a88b781f105a6662020-10-13 · +8dVerified by operator
Montana State AGbd_af935553dc09ee0b2020-10-13 · +8dVerified by operator

Show 2 more filings ↓up to 156d gap

Massachusetts State AGbd_1ff21cd8deb6825d2020-05-20 · +154dVerified
California State AGbd_d8ff1381ca0cea972020-05-18 · +156dVerified by operator

Name: City of Torrance
norm: city of torrance
Industry: government_public

Name: City of Torrance
norm: city of torrance
Industry: government_public
Industry: Governmentllm

Discovered: Mar 1, 2020
Materiality determined: —
Notification sent: Oct 13, 2020
Affected individuals: 1state-resident count only
Data types: Government IDIdentity (basic)Financial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 ChannelT1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: phishing_link

During the incident: Notified law enforcement
Retained Baker & Hostetler, LLP to provide legal advice and assistance investigating and responding to the incident
Engaged cybersecurity professionals to conduct a forensic investigation
Mailed notification letters via United States Postal Service First Class Mail
Established a dedicated call center
Changes made: Implementing additional technical safeguards
Reconfiguring some network appliances
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(234 days from discovery to filing)
Compliance flags: Leak >180d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 6 states

View merged incident ↗

California State AGMay 18 · first

Massachusetts State AG+2d

Indiana State AG+148d

Montana State AG+148d

California State AG+153d

Maine State AG+153d

New Hampshire State AG+156d · this page

Pattern: first filing May 18 (CA), last Oct 21 (NH) — a 156-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/torrence-california-20201021.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 21, 2020
Raw hash: 2354b308cc4606d4a6b6546aff36d0cd4b88c2472f262cdbaeefa58d48e5e2f1

Linked disclosures

Ransomware claims (1)

Regulatory filings (6) · sorted by filing gap

Reporting entityCity of Torrance

Victim entityCity of Torrance

Incidentdiscovered Mar 1, 2020

Stated responseNotified law enforcement

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov