HackingGovernmentGovernmentCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDPHIHealth (basic)Financial accountMediumContained

City of Victorville, California

bd_45b3a0a1921a59fd · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 24, 2023

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for City of Victorville, California →

The City of Victorville, California notified residents of a cybersecurity incident where an unauthorized actor accessed files containing personal information between August 12, 2023, and September 26, 2023. Affected data included names, Social Security numbers, driver's license/state ID numbers, medical information, and health insurance policy numbers. The City secured its network, engaged a cybersecurity firm, and offered one year of complimentary Experian IdentityWorks Credit 3B identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 12, 2023

Begins

Oct 24, 2023

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitenoescapebd_aff85baba1a276142023-10-23 · +1dCandidate

Regulatory filings (1) · sorted by filing gap

California State AGbd_debbb69ded42add52024-08-07 · +288dVerified by operator

Name: City of Victorville, California
norm: city of victorville california
Domain: victorvilleca.gov

Name: City of Victorville, California
norm: city of victorville california
Domain: victorvilleca.gov
Industry: Governmentllm

Discovered: —
Breach occurred: Aug 12, 2023 – Sep 26, 2023
Materiality determined: —
Notification sent: Jan 16, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDPHIHealth (basic)Financial account
Data elements: Social Security numberMedical information
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Took steps to secure our network
Commenced an investigation
Engaged a cybersecurity firm to assist
Implemented additional measures to enhance the security of our network
Offering a complimentary one-year membership to Experian’s IdentityWorks Credit 3B
Changes made: Implemented additional measures to enhance the security of our network
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings

View merged incident ↗

California State AGOct 24 · first · this page

California State AG+288d

Pattern: first filing Oct 24 (CA), last Aug 7 (CA) — a 288-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-575576
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 24, 2023
Raw hash: faefef11b6c3a96ef8413a5b8c235cb9e975275617be339f1779c2991f778be5

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityCity of Victorville, California

Victim entityCity of Victorville, California

IncidentUnknown

Stated responseTook steps to secure our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov