HackingEnergy & UtilitiesUtilitiesSupply Chain (3P Vendor)Employee Data InvolvedIdentity (basic)EmploymentCredentialsLowContained

East Bay Municipal Utility District

bd_3aad14dff64943fc · schema v1 · pii pii-v1

Severity

Low

Discovered

May 25, 2018

Filed

Jun 29, 2018

To disclose

5 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for East Bay Municipal Utility District →

East Bay Municipal Utility District notified employees of a potential data breach involving its third-party hosted emergency response software, Marconi. Unauthorized individuals may have accessed the hosting environment between February 5, 2014, and June 4, 2018. The incident was discovered on May 25, 2018. Affected data included employee names, IDs, work emails, job titles, password hashes, and for some, personal contact information. The system was taken offline, and employees were advised to change passwords.

J jump to incidentP pin to compareR raw source

California clockDiscovered May 25, 2018 → Notified Jun 27, 201833d ✓ CA 60-day OK5 weeks discovery → filing

Incident timeline

undetected · 1570 days

discovery → filing · 5 weeks / 35 days

Feb 5, 2014

Begins

May 25, 2018

Discovered

Jun 29, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: East Bay Municipal Utility District
norm: east bay municipal utility district
Domain: ebmud.com

Name: East Bay Municipal Utility District
norm: east bay municipal utility district
Domain: ebmud.com
Industry: Energy & Utilitiesllm

Discovered: May 25, 2018
Breach occurred: Feb 5, 2014 – Jun 4, 2018
Undetected for: 1,570 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 27, 2018
Affected individuals: Not disclosed
Data types: Identity (basic)EmploymentCredentials
Attack vector: Third-Party / Supply Chain
Threat actor: External
Third party: via Marconi

During the incident: Removed Marconi from service on June 4, 2018
Investigated the system in conjunction with the Multi-State Information Sharing and Analysis Center (MS-ISAC)
Sent notification letters to affected employees
Requested current employees to change District passwords ahead of standard rotation schedule
Changes made: Working to build a stronger and more secure hosting environment for the application
Decreasing the amount of personal information held by the system
Increasing efforts to monitor other third-party hosted systems to ensure they comply with the District’s security expectations
Enhancing vendor security safeguards, procedures, and practices with respect to District data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: CA 60-day OK · 33d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: May 25, 2018
→ Notified: Jun 27, 2018
33d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: May 25, 2018 → Notified: Jun 27, 2018	33d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-137582
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 29, 2018
Raw hash: 07014b57edc3aeda4a2710c10cf9b843fe7875bb7ce0a27dc27cbc544101428e

Reporting entityEast Bay Municipal Utility District

Victim entityEast Bay Municipal Utility District

Incidentdiscovered May 25, 2018

Stated responseRemoved Marconi from service on June 4, 2018

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov