California Department of Finance
bd_48972b6f910c8603 · schema v1 · pii pii-v1
Full breach record for California Department of Finance →The California Department of Finance experienced a cybersecurity incident on December 6, 2022, where data was unlawfully obtained from its servers. The intrusion was identified proactively through coordination with security partners. The incident potentially affected personnel data for a small number of former employees, including names, SSNs, employee IDs, home addresses, phone numbers, bank account information, and medical information. There was a threat to release the obtained data. The department engaged threat-hunting experts and is providing credit monitoring services.
Linked disclosures
Why this link?Ransomware claims (1)
- bd_6ea5048c835f2332Leak Sitelockbit_3filed 2022-12-12(18d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-560562
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 30, 2022
- Raw hash
- 017c38c7d351ae47c637231d71e5ead0c298df8e4a3795408b24f094fd6630cc
Reporting entity
- Name
- California Department of Financenorm: california department of finance
- Domain
- dof.ca.gov
Victim entity
- Name
- California Department of Financenorm: california department of finance
- Domain
- dof.ca.gov
Incident
- Discovered
- Dec 9, 2022
- Materiality determined
- —
- Notification sent
- Dec 16, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALS
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 7d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 9, 2022→ Notified: Dec 16, 20227d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.