MalwareGovernmentGovernmentRansomwareData EncryptedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)PIILowContained

Housing Authority of the City of Los Angeles

bd_418763a8ab9e1fea · schema v1 · pii pii-v1

Severity

Low

Discovered

Dec 31, 2022

Filed

Mar 10, 2023

To disclose

10 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Housing Authority of the City of Los Angeles →2 incidents on file

The Housing Authority of the City of Los Angeles (HACLA) experienced a ransomware attack resulting in unauthorized access to servers between January 15, 2022, and December 31, 2022. HACLA discovered encrypted files on December 31, 2022. The incident affected individuals' names and other personal information. HACLA shut down servers, engaged forensic specialists, notified law enforcement, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 350 days

discovery → filing · 10 weeks / 69 days

Jan 15, 2022

Begins

Dec 31, 2022

Discovered

Mar 10, 2023

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Housing Authority of the City of Los Angeles
norm: housing authority of the city of los angeles

Name: Housing Authority of the City of Los Angeles
norm: housing authority of the city of los angeles
Industry: Governmentllm

Discovered: Dec 31, 2022
Breach occurred: Jan 15, 2022 – Dec 31, 2022
Undetected for: 350 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 10, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)PII
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Reported this incident to local, state, and federal law enforcement agenciesProviding notice to appropriate regulatory authorities

During the incident: Shut down its servers
Launched an investigation with the assistance of third-party forensic specialists
Undertook a comprehensive review of all data contained on our systems
Reported this incident to local, state, and federal law enforcement agencies
Providing notice to appropriate regulatory authorities
Offering access to complimentary credit monitoring through Experian
Changes made: Reviewing our policies and procedures relating to data privacy and security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(69 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-564193
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 10, 2023
Raw hash: 19afb34afd3dbec7cf917db48ceb7b375f01f8fc6cfa0f8a332a09c6af86db9c

Reporting entityHousing Authority of the City of Los Angeles

Victim entityHousing Authority of the City of Los Angeles

Incidentdiscovered Dec 31, 2022

Stated responseShut down its servers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov