MalwareRansomwareData EncryptedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
San Francisco Jazz Organization
bd_2b635014f36212de · schema v1 · pii pii-v1
Full breach record for San Francisco Jazz Organization →San Francisco Jazz Organization experienced a ransomware attack on May 23, 2023, which encrypted critical systems including file servers and backups. Forensic investigation revealed potential access to employee personal information, including names, Social Security Numbers, driver's license numbers, and dates of birth. The organization engaged third-party experts, contained the incident, and implemented enhanced security measures including two-factor authentication and encryption. Affected individuals were offered 12 months of Experian IdentityWorks.
California clockDiscovered May 23, 2023 → Notified Sep 15, 2023115d ✗ CA 60-day late17 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1cd2694cf115ef3aMontana State AGfiled 2023-09-15(3d gap)Candidate
- bd_01209b0af71b8087California State AGfiled 2023-11-02(45d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-573460
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 18, 2023
- Raw hash
- 2b58915db78ddf8712e95adf2cd3775ba935805dc8e595d8e1aa69c10fb062d7
Reporting entity
- Name
- San Francisco Jazz Organizationnorm: san francisco jazz organization
Victim entity
- Name
- San Francisco Jazz Organizationnorm: san francisco jazz organization
Incident
- Discovered
- May 23, 2023
- Materiality determined
- —
- Notification sent
- Sep 15, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 17 weeks(118 days from discovery to filing)
- Compliance flags
- CA 60-day late · 115d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 23, 2023→ Notified: Sep 15, 2023115d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.