Social EngineeringPhishingStolen CredentialsEmployee Data InvolvedIDENTITY_BASICEMPLOYMENTLowContained
DYNAVAX TECHNOLOGIES CORPORATION
bd_6aec7d7ce2f1a0b7 · schema v1 · pii pii-v1
Full breach record for DYNAVAX TECHNOLOGIES CORPORATION →Dynavax Technologies Corporation reported a phishing incident where an unauthorized individual accessed an employee's email account on February 28, 2020. The company secured the account, engaged forensic investigators, and reviewed emails. Employee information was potentially exposed, but no evidence of misuse was found. Affected individuals were offered one year of complimentary identity protection services.
California clockDiscovered Feb 28, 2020 → Notified Jul 24, 2020147d ✗ CA 60-day late21 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-192386
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2020
- Raw hash
- 454776a3c1af2d9b93ea325f8b76b6ec4d124eb2277cd29c4e2bbd86c1a778aa
Reporting entity
- Name
- DYNAVAX TECHNOLOGIES CORPORATIONnorm: dynavax technologies
Victim entity
- Name
- DYNAVAX TECHNOLOGIES CORPORATIONnorm: dynavax technologies
Incident
- Discovered
- Feb 28, 2020
- Materiality determined
- —
- Notification sent
- Jul 24, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICEMPLOYMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 21 weeks(147 days from discovery to filing)
- Compliance flags
- CA 60-day late · 147d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 28, 2020→ Notified: Jul 24, 2020147d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.