HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedPIIFINANCIAL_ACCOUNTCREDENTIALSLowActive
City of Grand Prairie
bd_5ce119809af5785c · schema v1 · pii pii-v1
Full breach record for City of Grand Prairie →The City of Oceanside, California, experienced a data breach affecting customers who paid utility bills online between June 1, 2017, and August 15, 2017. Malicious code infiltrated a vendor-supported online payment system, exposing names, billing addresses, and credit card information (including security codes). The City shut down the compromised system, notified law enforcement, and engaged forensic experts. Affected individuals were advised to contact their credit card issuers and place fraud alerts.
California clockDiscovered Aug 14, 2017 → Notified Sep 6, 201723d ✓ CA 60-day OK23 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-101661
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 6, 2017
- Raw hash
- a4893fe3861a2ea7b17ba5ccdc7d5c1781de31ea846364df8982372729ea981a
Reporting entity
- Name
- City of Grand Prairienorm: city of grand prairie
- Domain
- gptx.org
- Industry
- government_public
Victim entity
- Name
- City of Grand Prairienorm: city of grand prairie
- Domain
- gptx.org
- Industry
- government_public
Incident
- Discovered
- Aug 14, 2017
- Materiality determined
- Sep 6, 2017
- Notification sent
- Sep 6, 2017
- Affected individuals
- Not disclosed
- Data types
- PIIFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement agencies
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 23d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 14, 2017→ Notified: Sep 6, 201723d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.