HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumActive
Los Angeles Fire Department
bd_4a14cc1692e9f447 · schema v1 · pii pii-v1
Full breach record for Los Angeles Fire Department →The County of Los Angeles Fire Department experienced a security breach on July 13, 2021, when an internal employee created a website exposing unauthorized users to personal information, including names, dates of birth, and COVID-19 vaccination status. The website was taken down immediately upon discovery on July 14, 2021. The investigation is ongoing, and no evidence of malicious use was found.
California clockDiscovered Jul 14, 2021 → Notified Aug 10, 202127d ✓ CA 60-day OK7 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-544830
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 1, 2021
- Raw hash
- 9a672cbd4199f214967b1433e5ed9f382c08c6c9235baf8d33af5af20f1f45e6
Reporting entity
- Name
- Los Angeles Fire Departmentnorm: los angeles fire department
- Domain
- lafd.org
Victim entity
- Name
- Los Angeles Fire Departmentnorm: los angeles fire department
- Domain
- lafd.org
Incident
- Discovered
- Jul 14, 2021
- Materiality determined
- —
- Notification sent
- Aug 10, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- Internal
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(49 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 27d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 14, 2021→ Notified: Aug 10, 202127d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.