HackingIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALSHighContained
Pacific Specialty Portal
bd_1b28cd1748ce7913 · schema v1 · pii pii-v1
Full breach record for Pacific Specialty Portal →Pacific Specialty Insurance Company reported a data breach affecting 2,312 California residents. Unauthorized actors accessed employee email accounts between March 20 and March 30, 2019. Impacted data included names, SSNs, driver's license numbers, financial account numbers, medical information, payment card numbers, health insurance info, and usernames/passwords. Notifications were sent starting January 24, 2020, offering 12 months of credit monitoring.
California clockDiscovered Jun 14, 2019 → Notified Jan 24, 2020224d ✗ CA 60-day late32 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2,312 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-186395
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 24, 2020
- Raw hash
- 5341ab83777ffe2d54e17f1883472b311e563d20232b3e4fdc99e00699b2b4ec
Reporting entity
- Name
- Pacific Specialty Insurance Companynorm: pacific specialty insurance
Victim entity
- Name
- Pacific Specialty Portalnorm: pacific specialty portal
- Domain
- policymgmnt.pacificspecialty.com
Incident
- Discovered
- Jun 14, 2019
- Materiality determined
- —
- Notification sent
- Jan 24, 2020
- Affected individuals
- 2,312
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 32 weeks(224 days from discovery to filing)
- Compliance flags
- CA 60-day late · 224d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 14, 2019→ Notified: Jan 24, 2020224d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.