Hello Housing
bd_4745a69a001b01ea · schema v1 · pii pii-v1
Full breach record for Hello Housing →Hello Housing reported a data security incident in California. On December 2, 2020, the company detected suspicious activity in its business email environment, leading to the discovery that a business email account had been compromised by an unauthorized third party. The incident likely exposed sensitive personal information including names, addresses, SSNs, dates of birth, driver's license numbers, medical information, and financial account data. Hello Housing engaged forensic specialists, secured its network, and offered 12 months of identity monitoring services to affected individuals.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-542649
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2021
- Raw hash
- 01f713e38a6392daaa5ed0d19b8cd2dea9de3e008730f49cb0d2e72749f5faf4
Reporting entity
- Name
- Hello Housingnorm: hello housing
- Domain
- hellohousing.org
Victim entity
- Name
- Hello Housingnorm: hello housing
- Domain
- hellohousing.org
Incident
- Discovered
- Dec 2, 2020
- Materiality determined
- Nov 24, 2024
- Notification sent
- Nov 24, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 31 weeks(217 days from discovery to filing)
- Compliance flags
- CA 60-day late · 1453d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 2, 2020→ Notified: Nov 24, 20241453d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.