The Law Foundation of Silicon Valley
bd_1a3595eb20c0a82e · schema v1 · pii pii-v1
Full breach record for The Law Foundation of Silicon Valley →Press / market disclosure — not a breach-notification filing
A media or market posting that confirms an incident but carries no breach-notification fields, so compliance clocks aren't assessable. The summary below is extracted from the coverage — verify against the source.
San Jose nonprofit that serves low-income residents impacted by ransomware attack. Law Foundation of Silicon Valley: A sophisticated ransomware attack has affected a housing advocacy group in San Jose, impacting more than 40,000 clients and employees. The exposed data includes Social Security and immigration numbers, medical records, and financial information. The attack has been attributed to a group called "ALPHV" that targets the healthcare sector. No clients have reported malicious use of their information so far. Additional security measures have been put in place to prevent future attacks. This is the second large-scale attack in San Jose in two months, following the one that affected the Santa Clara Family Health Plan. Linked ransomware group: alphv.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Feb 18, 2023
Press report
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Attack → press
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitealphvbd_fbf079329eb207da2023-03-06 · +16dVerified by operator
Regulatory filings (6) · sorted by filing gap
- Indiana State AGbd_24da56f2abf2baec2023-07-06 · +138dCandidate
- Maine State AGbd_5a62cf87f4eb8d0c2023-07-06 · +138dVerified
- California State AGbd_9e708111008076222023-07-06 · +138dVerified
- Montana State AGbd_dec02ac19b20e1d82023-07-06 · +138dVerified
Show 2 more filings ↓Show fewer ↑up to 156d gap
- New Hampshire State AGbd_4c53d0e902bff78d2023-07-10 · +142dVerified
- Massachusetts State AGbd_699f1219221367bd2023-07-24 · +156dVerified
Filing propagation · 6 filings · 6 states
View merged incident ↗Pattern: first filing Jul 6 (IN), last Jul 24 (MA) — a 18-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- incident type + narrative only (may be machine-translated)
- discovery date
- materiality
- affected count
- data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.
alphv
According to ransomware.live, The operators of the ALPHV/BlackCat ransomware began their activity in December 2021, making posts on Dark Web forums to promote their affiliate program, offering other actors the opportunity to engage in a 'new type of ransomware family' developed from scratch using the Rust programming language. Some clear evidence indicates that the actors behind this new ransomware are not new to cybercrime, and there were links to other affiliate programs such as DarkSide, BlackMatter, and REvil. (After several attacks against large companies, these groups faced pressure and arrests, necessitating the termination of their operations). As a security measure, the operators of ALPHV implemented the requirement for the execution of the ransomware payload by providing an 'access token,' which is supplied by the owners of the Ransomware-as-a-Service to the affiliate. This token is added to the victim's ransom note so that they can contact the threat actor responsible for encrypting the data. ALPHV affiliates employ double and triple extortion techniques, meaning the publication of the company's name on leak sites, threats of data leakage, and lastly, threats of DDoS attacks against the organization. Source: https://github.com/crocodyli/ThreatActors-TTPs