HackingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Channel Islands YMCA
bd_3d07493bf241a2c4 · schema v1 · pii pii-v1
Full breach record for Channel Islands YMCA →Channel Islands YMCA reported unauthorized access to work email accounts. Unusual activity was detected on March 19, 2025, and the organization learned of the incident on April 30, 2025. Personal information transmitted via email may have been accessed. The organization engaged independent experts, implemented additional security measures, and offered complimentary identity monitoring services through Kroll.
California clockDiscovered Mar 19, 2025 → Notified Apr 30, 202542d ✓ CA 60-day OK9 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-603075
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 22, 2025
- Raw hash
- 338813e8ed38c80745d974290814b36b5ff0accec96b8f5fd9e869ad24d84bd9
Reporting entity
- Name
- Channel Islands YMCAnorm: channel islands ymca
- Domain
- ciymca.org
Victim entity
- Name
- Channel Islands YMCAnorm: channel islands ymca
- Domain
- ciymca.org
Incident
- Discovered
- Mar 19, 2025
- Materiality determined
- —
- Notification sent
- Apr 30, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1114 Email CollectionT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified California Attorney General
Compliance
- Time to disclose
- 9 weeks(64 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 42d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 19, 2025→ Notified: Apr 30, 202542d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.