HackingFinancial ServicesFinanceVulnerability ExploitData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Government IDMediumContained

CALIFORNIA STATE TEACHERS' RETIREMENT SYSTEM

bd_443e00c780258e1a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 26, 2023

To disclose

—

Affected

Not disclosed

Confidence

67%

Full breach record for CALIFORNIA STATE TEACHERS' RETIREMENT SYSTEM →

California State Teachers' Retirement System (CalSTRS) notified individuals of a data breach involving its third-party service provider, PBI Research Services. An unauthorized party exploited a vulnerability in PBI's secure file transfer application to access files containing CalSTRS members' names, Social Security numbers, dates of birth, and ZIP codes. CalSTRS offered affected individuals 12 months of complimentary credit monitoring through Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Jun 26, 2023

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

Part of Pension Benefit Information, LLC supply-chain incident (2023) — a supply-chain cascade affecting multiple organizations.View cascade →

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: CALIFORNIA STATE TEACHERS' RETIREMENT SYSTEM
norm: california state teachers retirement system

Name: CALIFORNIA STATE TEACHERS' RETIREMENT SYSTEM
norm: california state teachers retirement system
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Jun 30, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Third party: via PBI Research Services
Initial access: exploit_public_facing

During the incident: Offered you a complimentary 12-month membership with Experian IdentityWorks Credit 3B
Changes made: Offered 12 months of complimentary credit monitoring through Experian
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-568490
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2023
Raw hash: d748b719600b90ffdf66d2f3d9eb5bf889107705b4addf397a30e71a3b65fae9

Reporting entityCALIFORNIA STATE TEACHERS' RETIREMENT SYSTEM

Victim entityCALIFORNIA STATE TEACHERS' RETIREMENT SYSTEM

IncidentUnauthorized Access

Stated responseOffered you a complimentary 12-month membership with Experian IdentityWorks Credit 3B

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov