HackingStolen CredentialsSupply Chain (3P Vendor)Employee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIALEMPLOYMENTMediumContained
Phoenix House Foundation, Inc. and its affiliates
bd_348fb33d632cb30e · schema v1 · pii pii-v1
Full breach record for Phoenix House Foundation, Inc. and its affiliates →Phoenix House Foundation, Inc. and its affiliates notified individuals that a third-party payroll consultant made unauthorized changes to electronic payroll systems on December 19, 2014. The company discovered the activity on December 22, 2014. Affected data includes names, addresses, Social Security numbers, salary, and benefit information for current and former employees. The consultant's access was removed, the contract terminated, and law enforcement notified. A comprehensive security review is underway.
California clockDiscovered Dec 22, 2014 → Notified Feb 4, 201544d ✓ CA 60-day OK6 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-48355
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 5, 2015
- Raw hash
- 518b17998a7ec0a53508f09094e58763d351fa5c97d478fd13f637dbe9fb86f4
Reporting entity
- Name
- Phoenix House Foundation, Inc. and its affiliatesnorm: phoenix house foundation inc and its affiliates
Victim entity
- Name
- Phoenix House Foundation, Inc. and its affiliatesnorm: phoenix house foundation inc and its affiliates
Incident
- Discovered
- Dec 22, 2014
- Materiality determined
- —
- Notification sent
- Feb 4, 2015
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIALEMPLOYMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- Partner
- Regulator citations
- Reported the incident to law enforcement
- Third party
- via Payroll Service Provider
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 6 weeks(45 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 44d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 22, 2014→ Notified: Feb 4, 201544d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.