Social EngineeringPhishingEmployee Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTFINANCIAL_ACCOUNTMediumContained
RENOVATE AMERICA HOLDINGS, LLC
bd_5dfb7ef5d34b00f0 · schema v1 · pii pii-v1
Full breach record for RENOVATE AMERICA HOLDINGS, LLC →Renovate America, Inc. disclosed an email spoofing attack on January 20, 2017, where an attacker impersonated the CEO to request employee W-2 forms. Employee W-2s containing names, addresses, SSNs, and wage information were sent to the fraudulent account. The company discovered the fraud within hours, contacted the FBI and IRS, and offered 24 months of identity protection via Experian. No network compromise occurred.
California clockDiscovered Jan 20, 2017 → Notified Jan 20, 20170d ✓ CA 60-day OK14 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-66165
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 3, 2017
- Raw hash
- eff6a9aabd78cb6f98d4751726acb2359ae37813a0e3d87aa675df83822dc430
Reporting entity
- Name
- RENOVATE AMERICA HOLDINGS, LLCnorm: renovate america
Victim entity
- Name
- RENOVATE AMERICA HOLDINGS, LLCnorm: renovate america
Incident
- Discovered
- Jan 20, 2017
- Materiality determined
- —
- Notification sent
- Jan 20, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Regulator citations
- Contacted the IRSContacted the FBIContacting the relevant state Attorneys General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 14 days(14 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 20, 2017→ Notified: Jan 20, 20170d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.