HackingHealthcareProfessional ServicesHealthcareStolen CredentialsEmployee Data InvolvedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)MediumContained

Tessie Cleveland Community Services Corp

bd_208cb75278d882c8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 20, 2022

Filed

Sep 16, 2022

To disclose

8 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Tessie Cleveland Community Services Corp →

Tessie Cleveland Community Services Corp. disclosed that an unknown person accessed employee email accounts between June 17 and June 30, 2022. The incident was discovered on July 20, 2022. Affected data included names, Social Security numbers, and limited care information for clients and employees. The organization engaged a cybersecurity firm and is offering one year of identity monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 33 days

discovery → filing · 8 weeks / 58 days

Jun 17, 2022

Begins

Jul 20, 2022

Discovered

Sep 16, 2022

Filed

vs. sector median

3 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

HHS OCRbd_39c9cbddb1dcf4f52022-09-16Verified

Name: Tessie Cleveland Community Services Corp
norm: tessie cleveland community

Name: Tessie Cleveland Community Services Corp
norm: tessie cleveland community
Industry: HealthcarellmProfessional Servicesllm

Discovered: Jul 20, 2022
Breach occurred: Jun 17, 2022 – Jun 30, 2022
Undetected for: 33 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial

During the incident: Worked with a cybersecurity firm to learn more
Offering a free one-year membership of identity monitoring services
Changes made: Further securing our network and email environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

HHS OCRSep 16 · first

California State AGSep 16 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-557301
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 16, 2022
Raw hash: e7f6c33e9b2dc043e7b41d5f18465e74a3af3f080a53c5e723378a6d5396273f

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityTessie Cleveland Community Services Corp

Victim entityTessie Cleveland Community Services Corp

Incidentdiscovered Jul 20, 2022

Stated responseWorked with a cybersecurity firm to learn more

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov