HackingGovernmentGovernmentData ExfiltratedCustomer Data InvolvedDelayed DiscoveryGovernment IDFinancial accountPHIHealth (basic)MediumContained

Plumas County, California

bd_20faeb4702cb209f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 23, 2022

Filed

Apr 8, 2022

To disclose

16 days

Affected

Not disclosed

Confidence

65%

Plumas County, California notified residents that an unauthorized party accessed IT systems from October 20 to November 14, 2021, and acquired files containing SSNs, driver's license numbers, financial account info, and medical/health insurance data. The County first learned of the incident on March 23, 2022, when technical issues disrupted operations. The County secured systems, launched an investigation, notified law enforcement, and offered one year of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d16 days discovery → filing

Incident timeline

undetected · 154 days

discovery → filing · 16 days

Oct 20, 2021

Begins

Mar 23, 2022

Discovered

Apr 8, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Plumas County, California
norm: plumas county
Domain: plumascounty.us

Name: Plumas County, California
norm: plumas county
Domain: plumascounty.us
Industry: Governmentllm

Discovered: Mar 23, 2022
Breach occurred: Oct 20, 2021 – Nov 14, 2021
Undetected for: 154 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 23, 2022
Affected individuals: Not disclosed
Data types: Government IDFinancial accountPHIHealth (basic)
Data elements: Social Security numberMedical information
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Took steps to secure our systems
Launched an investigation
Notified law enforcement
Implemented additional safeguards and technical security measures to further secure our systems
Offering a complimentary one-year membership to Experian’s IdentityWorks
Changes made: Implemented additional safeguards and technical security measures to further secure our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: Leak >90dClock withheld · confirmation date

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-552399
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 8, 2022
Raw hash: be186b15e55aed69dccb21a782b81f6a1701c19aef29334a228702ed15a5b6fc

Reporting entityPlumas County, California

Victim entityPlumas County, California

Incidentdiscovered Mar 23, 2022

Stated responseTook steps to secure our systems

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov