HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
focusIT, Inc. on behalf of 32 business customers
bd_54d36976270d5b76 · schema v1 · pii pii-v1
Full breach record for focusIT, Inc. on behalf of 32 business customers →focusIT, Inc. reported a data breach affecting 32 business customers' applicants. Unknown threat actors compromised a third-party system on August 2, 2022, potentially accessing names, DOBs, addresses, and SSNs. The incident was contained, FBI was notified, and free credit monitoring was offered.
California clockDiscovered Aug 2, 2022 → Notified Sep 28, 202257d ✓ CA 60-day OK8 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-557773
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 30, 2022
- Raw hash
- 2b8d3ba680de14869bc028935ca7c2a5ede59f6a9415a640f7c6d42f63b380e3
Reporting entity
- Name
- focusIT, Incnorm: focusit
- Domain
- focusitinc.com
Victim entity
- Name
- focusIT, Inc. on behalf of 32 business customersnorm: focusit inc on behalf of 32 business customers
Incident
- Discovered
- Aug 2, 2022
- Materiality determined
- —
- Notification sent
- Sep 28, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified FBI
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(59 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 57d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 2, 2022→ Notified: Sep 28, 202257d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.