HackingGovernmentGovernmentStolen CredentialsCustomer Data InvolvedIdentity (basic)CredentialsLowContained

Housing Authority of the County of San Bernardino

bd_3d50aebe2c4e8019 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 19, 2023

Filed

Jan 3, 2024

To disclose

28 weeks

Affected

4state residents only

Linked

6 filings

Confidence

66%

Full breach record for Housing Authority of the County of San Bernardino →

Housing Authority of the County of San Bernardino notified NH AG of unauthorized access to an employee email account discovered June 19, 2023. Investigation confirmed access by unauthorized third party. Four NH residents affected. Notice sent Jan 2, 2024, offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 weeks / 198 days

Jun 19, 2023

Discovered

Dec 26, 2023

Scope determined

Jan 3, 2024

Filed

vs. sector median

+17 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_7287adc2de377fe02024-01-03Candidate
California State AGbd_de2d36b21007fc2a2024-01-03Verified
Maine State AGbd_c794c4e88c6303122024-01-04 · +1dVerified by operator
Vermont State AGbd_405152691464335a2024-01-02 · +1dVerified

Show 1 more filing ↓up to 1d gap

Indiana State AGbd_a061da6246ee57fb2024-01-02 · +1dVerified

Name: Housing Authority of the County of San Bernardino
norm: housing authority of the county of san bernardino

Name: Housing Authority of the County of San Bernardino
norm: housing authority of the county of san bernardino
Industry: Governmentllm

Discovered: Jun 19, 2023
Materiality determined: Dec 26, 2023
Notification sent: Jan 2, 2024
Affected individuals: 4state-resident count only
Data types: Identity (basic)Credentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General Consumer Protection Bureau
Initial access: valid_credentials

During the incident: Performed a password reset for the affected account
Engaged a third-party forensic firm to investigate the incident
Engaged a third-party team of forensic investigators
Secured our email tenant
Changes made: Secured our email tenant
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(198 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Vermont State AGJan 2 · first

Indiana State AGJan 2 · first

Montana State AG+1d

California State AG+1d

New Hampshire State AG+1d · this page

Maine State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/housing-authority-county-san-bernardino-20240103.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 3, 2024
Raw hash: d4414b6631d2e6af1bf6bdf7a3464fa5e55adf92648fa0963d4de3f0ca097a73

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityHousing Authority of the County of San Bernardino

Victim entityHousing Authority of the County of San Bernardino

Incidentdiscovered Jun 19, 2023

Stated responsePerformed a password reset for the affected account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov