HackingCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
WebTPA Employer Services, LLC
bd_3a0ea1b2445d3a62 · schema v1 · pii pii-v1
Full breach record for WebTPA Employer Services, LLC →WebTPA Employer Services, LLC detected suspicious activity on its network on December 28, 2023. An investigation revealed an unauthorized actor may have accessed personal information between April 18 and April 23, 2023. The company notified federal law enforcement and engaged third-party cybersecurity experts. Affected individuals are offered two years of identity monitoring. Financial and health data were not impacted.
California clockDiscovered Dec 28, 2023 → Notified May 8, 2024132d ✗ CA 60-day late19 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_24f51d691fa0af75California State AGfiled 2024-04-23(15d gap)Candidate
- bd_5504564f0ebe377dHawaii State AGfiled 2024-04-01(37d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-585037
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 8, 2024
- Raw hash
- e4431c1db8e14fc9c697d9f3164f176cada1f043015f9409f03b95a19e3ecb8e
Reporting entity
- Name
- WebTPA Employer Services, LLCnorm: webtpa employer
Victim entity
- Name
- WebTPA Employer Services, LLCnorm: webtpa employer
Incident
- Discovered
- Dec 28, 2023
- Materiality determined
- —
- Notification sent
- May 8, 2024
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 19 weeks(132 days from discovery to filing)
- Compliance flags
- CA 60-day late · 132d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 28, 2023→ Notified: May 8, 2024132d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.