Social EngineeringOtherPhishingStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Financial accountLowContained

The Grand Lodge of Free & Accepted Masons of California

bd_33978a6670ab5b5d · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 14, 2022

Filed

Aug 19, 2022

To disclose

9 weeks

Affected

1state residents only

Linked

5 filings

Confidence

64%

Full breach record for The Grand Lodge of Free & Accepted Masons of California →

The Grand Lodge of Free & Accepted Masons of California notified individuals of a data breach involving unauthorized access to an employee email account. The incident, discovered on June 14, 2022, potentially exposed names, signatures, and financial account information from donation checks sent between March 2020 and June 2022. The organization engaged forensic investigators, reset passwords, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 819 days

discovery → filing · 9 weeks / 66 days

Mar 17, 2020

Begins

Jun 14, 2022

Discovered

Aug 19, 2022

Filed

vs. sector median

+1 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_559b05b09bfd3c2f2022-08-19Verified
Massachusetts State AGbd_647c45f20683f3532022-08-19Verified
California State AGbd_f6a89cd286e316282022-08-19Verified
Indiana State AGbd_f6b91bd78419ef362022-08-19Verified

Name: The Grand Lodge of Free & Accepted Masons of California
norm: the grand lodge of free accepted masons of california

Name: The Grand Lodge of Free & Accepted Masons of California
norm: the grand lodge of free accepted masons of california
Industry: Otherllm

Discovered: Jun 14, 2022
Breach occurred: Mar 17, 2020 – Jun 14, 2022
Undetected for: 819 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 19, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Performed a password reset for the affected account
Engaged a third-party team of forensic investigators
Took steps to secure their systems
Enhancing the security of their network
Revised its policies for storage of donation checks
Arranged for you to enroll, at no cost to you, in an online credit monitoring service for 12 months
Changes made: Enhancing the security of their network
Revised its policies for storage of donation checks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGAug 19 · first

Massachusetts State AGAug 19 · first

California State AGAug 19 · first

Indiana State AGAug 19 · first

Montana State AGAug 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-507.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 19, 2022
Raw hash: 43c93cec52a0263920347c810a00097190f6fe69b5ab02d34c95f31bb6b22654

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Grand Lodge of Free & Accepted Masons of California

Victim entityThe Grand Lodge of Free & Accepted Masons of California

Incidentdiscovered Jun 14, 2022

Stated responsePerformed a password reset for the affected account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov