HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountPHIHealth (basic)CredentialsHighContained

Pacific Specialty Insurance Company

bd_1b28cd1748ce7913 · schema v1 · pii pii-v1

Severity

High

Discovered

Jun 14, 2019

Filed

Jan 24, 2020

To disclose

32 weeks

Affected

2,312state residents only

Linked

3 filings

Confidence

65%

Full breach record for Pacific Specialty Insurance Company →

Pacific Specialty Insurance Company notified California residents that unauthorized actors accessed employee email accounts between March 20 and March 30, 2019. The company became aware of suspicious activity on June 14, 2019. The incident potentially exposed names, SSNs, driver's licenses, financial account numbers, medical information, payment card numbers, health insurance info, and credentials for 2,312 California residents. The company secured accounts, enabled MFA, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 14, 2019 → Notified Jan 24, 2020224d ✗ CA 60-day late32 weeks discovery → filing

Incident timeline

undetected · 86 days

discovery → filing · 32 weeks / 224 days

Mar 20, 2019

Begins

Jun 14, 2019

Discovered

Jan 24, 2020

Filed

vs. sector median

+23 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_16c5503ee945ead42020-01-24Verified
Indiana State AGbd_7e3e31fb14e3291a2020-01-24Verified

Name: Pacific Specialty Insurance Company
norm: pacific specialty insurance

Name: Pacific Specialty Insurance Company
norm: pacific specialty insurance
Industry: Financial Servicesllm

Discovered: Jun 14, 2019
Breach occurred: Mar 20, 2019 – Mar 30, 2019
Undetected for: 86 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 24, 2020
Affected individuals: 2,312state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHIHealth (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Worked with third party specialists to investigate the nature and scope of the activity
Secured the compromised email accounts by updating passwords
Enabled multi-factor authentication on all email accounts
Offered impacted California residents access to twelve (12) months of free credit monitoring and identity protection services through TransUnion
Provided impacted California residents with guidance on how to better protect against identity theft and fraud
Changes made: Enabled multi-factor authentication on all email accounts
Taking additional steps to improve security and better protect against similar incidents in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(224 days from discovery to filing)
Compliance flags: CA 60-day late · 224d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 14, 2019
→ Notified: Jan 24, 2020
224d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 14, 2019 → Notified: Jan 24, 2020	224d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJan 24 · first

Indiana State AGJan 24 · first

California State AGJan 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-186395
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 24, 2020
Raw hash: 5341ab83777ffe2d54e17f1883472b311e563d20232b3e4fdc99e00699b2b4ec

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityPacific Specialty Insurance Company

Victim entityPacific Specialty Insurance Company

Incidentdiscovered Jun 14, 2019

Stated responseWorked with third party specialists to investigate the nature and scope of the activity

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov