Social EngineeringPhishingEmployee Data InvolvedIDENTITY_GOVERNMENTEMPLOYMENTFINANCIAL_ACCOUNTMediumContained
Momentum Mental Health
bd_5a29cc5892dac7f3 · schema v1 · pii pii-v1
Full breach record for Momentum Mental Health →On June 3, 2016, Momentum for Mental Health was targeted by an email spoofing scam. The incident resulted in the inadvertent disclosure of W-2 information (name, SSN, wages, taxes) for current and former employees. The company discovered the incident within hours, confirmed it was isolated, contacted law enforcement, and offered three years of identity protection. Remediation included policy reviews and employee training.
California clockDiscovered Jun 3, 2016 → Notified Jun 9, 20166d ✓ CA 60-day OK10 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-62338
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 13, 2016
- Raw hash
- 736fb17cfb41249b2128ca4f85bb4ceb251b4aca317af0658a6539fb6f7e83f1
Reporting entity
- Name
- Momentum Mental Healthnorm: momentum mental health
- Domain
- momentummh.com
Victim entity
- Name
- Momentum Mental Healthnorm: momentum mental health
- Domain
- momentummh.com
Incident
- Discovered
- Jun 3, 2016
- Materiality determined
- —
- Notification sent
- Jun 9, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTEMPLOYMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 10 days(10 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 6d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 3, 2016→ Notified: Jun 9, 20166d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.