HackingStolen CredentialsCapture App DataCustomer Data InvolvedEmployee Data InvolvedDelayed DiscoveryPIIIdentity (basic)Government IDFinancial accountHealth (basic)CredentialsMediumContained

The Olympic Club Apartments of Arlington LLC

bd_1c7a1c644640e23e · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 15, 2023

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

80%

Full breach record for The Olympic Club Apartments of Arlington LLC →

The Olympic Club notified the California AG on March 10, 2023 of a 2022 email account compromise. An unknown third party gained access to certain employee email accounts from approximately March 31 to April 27, 2022. Potentially exposed data includes names, login credentials, SSNs, driver's license numbers, passport numbers, financial account information, and health/medical information. The Club engaged external forensic investigators and cooperated with law enforcement, and offered 12-month Equifax credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 31, 2022

Begins

Mar 15, 2023

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_2d4b3902c279c9242023-03-14 · +1dCandidate
Massachusetts State AGbd_b7e84d3a4c903db72023-03-14 · +1dVerified
Montana State AGbd_19d1b5e874974b5f2023-03-10 · +5dCandidate

Name: The Olympic Club Apartments of Arlington LLC
norm: the olympic club apartments of arlington

Name: The Olympic Club Apartments of Arlington LLC
norm: the olympic club apartments of arlington

Discovered: —
Breach occurred: Mar 31, 2022 – Apr 27, 2022
Materiality determined: —
Notification sent: Mar 10, 2023
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDFinancial accountHealth (basic)Credentials
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified California Attorney GeneralFull cooperation with law enforcement

During the incident: Took immediate steps in response to the incident which stopped the unauthorized access and secured our systems
Conducted a thorough investigation, which included our full cooperation with law enforcement
Worked diligently with an external forensic investigation firm to determine the source and scope of this unauthorized access
Undertook a comprehensive review of the affected mailboxes to identify the personal information that was present
Arranged for affected individuals to enroll in a complimentary twelve (12)-month credit monitoring service through Equifax Credit Watch Gold
Changes made: Stopped the unauthorized access and secured our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGMar 10 · first

Maine State AG+4d

Massachusetts State AG+4d

California State AG+5d · this page

Pattern: first filing Mar 10 (MT), last Mar 15 (CA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-564344
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 15, 2023
Raw hash: 2300f4383648f438d720ce43ba5093066da4108a319753fe5315fef27cf2cc49

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityThe Olympic Club Apartments of Arlington LLC

Victim entityThe Olympic Club Apartments of Arlington LLC

IncidentUnauthorized Access

Stated responseTook immediate steps in response to the incident which stopped the unauthorized access and secured our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov