UnknownHospitalityHospitalityCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Balboa Bay Club Ventures LLC

bd_32f9d4acd040fb30 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 18, 2024

Filed

Oct 3, 2024

To disclose

11 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for Balboa Bay Club Ventures LLC →

Balboa Bay Club Ventures LLC notified the California Attorney General of a data security incident. The breach occurred on July 9, 2024, and was discovered on July 18, 2024, following a network disruption. Unauthorized access may have exposed first and last names, driver's license numbers, and Social Security numbers. The company engaged cybersecurity experts, reviewed affected files, and is offering 12 months of credit monitoring and fraud assistance to impacted individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jul 18, 2024 → Notified Oct 1, 202475d ✗ CA 60-day late11 weeks discovery → filing

Incident timeline

undetected · 9 days

discovery → filing · 11 weeks / 77 days

Jul 9, 2024

Begins

Jul 18, 2024

Discovered

Oct 3, 2024

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_3d613657eff97ac42024-10-03Verified
Massachusetts State AGbd_868b4ddfb906859c2024-10-03Verified

Name: Balboa Bay Club Ventures LLC
norm: balboa bay club

Name: Balboa Bay Club Ventures LLC
norm: balboa bay club
Industry: Hospitalityllm

Discovered: Jul 18, 2024
Breach occurred: Jul 9, 2024
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 1, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown

During the incident: Initiated an investigation of the matter
Engaged independent cybersecurity experts to assist with the process
Undertook a comprehensive review of those files
Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Offering access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance
Changes made: Implemented measures to enhance security and minimize the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(77 days from discovery to filing)
Compliance flags: CA 60-day late · 75d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jul 18, 2024
→ Notified: Oct 1, 2024
75d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jul 18, 2024 → Notified: Oct 1, 2024	75d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGOct 3 · first

Massachusetts State AGOct 3 · first

California State AGOct 3 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-592842
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 3, 2024
Raw hash: a86f5e208736c63b27456a73066845e26df95b096c991d286840418892164bb5

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityBalboa Bay Club Ventures LLC

Victim entityBalboa Bay Club Ventures LLC

Incidentdiscovered Jul 18, 2024

Stated responseInitiated an investigation of the matter

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov