AccidentalGovernmentHealthcareGovernmentMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Sacramento County IHSS Public Authority

bd_55502bb612ea6a8d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 12, 2021

Filed

May 12, 2021

To disclose

4 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for Sacramento County IHSS Public Authority →

Sacramento County IHSS Public Authority disclosed a misconfiguration in its online provider enrollment webpage software that may have exposed personal information. The error was deployed on February 28, 2021, and discovered on April 12, 2021, when the webpage was shut off. Affected data includes names, dates of birth, addresses, phone numbers, email addresses, and driver's license/ID numbers. Social security numbers and health privacy information were not involved. The organization performed an audit of website activity and offered two years of complimentary Experian IdentityWorks to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Apr 12, 2021 → Notified May 3, 202121d ✓ CA 60-day OK4 weeks discovery → filing

Incident timeline

undetected · 43 days

discovery → filing · 4 weeks / 30 days

Feb 28, 2021

Begins

Apr 12, 2021

Discovered

May 12, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Sacramento County IHSS Public Authority
norm: sacramento county ihss public authority

Name: Sacramento County IHSS Public Authority
norm: sacramento county ihss public authority
Industry: GovernmentllmHealthcarellm

Discovered: Apr 12, 2021
Breach occurred: Feb 28, 2021 – Apr 12, 2021
Undetected for: 43 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 3, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Misconfiguration

During the incident: Shut off the webpage accessing the data within an hour of discovery
Performed an audit of the website activity during the time period in question
Offering complimentary access to Experian IdentityWorks for two years
Changes made: Taking steps to prevent a similar occurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: CA 60-day OK · 21d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Apr 12, 2021
→ Notified: May 3, 2021
21d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Apr 12, 2021 → Notified: May 3, 2021	21d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-540793
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 12, 2021
Raw hash: faf87c68ff61e8b3be3ba5bf254d8b87743577c73dee94cba4245279c50efd58

Reporting entitySacramento County IHSS Public Authority

Victim entitySacramento County IHSS Public Authority

Incidentdiscovered Apr 12, 2021

Stated responseShut off the webpage accessing the data within an hour of discovery

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov