Social EngineeringPhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Word & Brown Insurance Administrators, Inc.
bd_0ec26c59324df87e · schema v1 · pii pii-v1
Full breach record for Word & Brown Insurance Administrators, Inc. →Word & Brown Insurance Administrators, Inc. notified the California AG of a data breach discovered on October 23, 2024. An employee workstation was compromised via a phishing scam, leading to unauthorized access and exfiltration of files containing names and other data elements to an external server. The company isolated the system, engaged forensic consultants, and is offering credit monitoring to affected individuals.
California clockDiscovered Oct 23, 2024 → Notified Mar 24, 2025152d ✗ CA 60-day late22 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-600323
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 24, 2025
- Raw hash
- dc0170492f807c1b18069ee336be26144b58c44a50d480a5157253fe712d450b
Reporting entity
- Name
- Word & Brown Insurance Administrators, Inc.norm: word brown insurance administrators
- Domain
- wbcompanies.com
Victim entity
- Name
- Word & Brown Insurance Administrators, Inc.norm: word brown insurance administrators
- Domain
- wbcompanies.com
Incident
- Discovered
- Oct 23, 2024
- Materiality determined
- —
- Notification sent
- Mar 24, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 22 weeks(152 days from discovery to filing)
- Compliance flags
- CA 60-day late · 152d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 23, 2024→ Notified: Mar 24, 2025152d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.