Social EngineeringPhishingBECEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTFINANCIAL_ACCOUNTMediumContained
Snapchat
bd_6d7574715fffc1be · schema v1 · pii pii-v1
Full breach record for Snapchat →Snapchat, Inc. disclosed that its payroll department was targeted by an email phishing scam on February 26, 2016, where a scammer impersonated the CEO to request employee information. The incident resulted in the improper external disclosure of payroll data for current and former employees, including names, SSNs, wages, and benefit details. No internal systems were breached. Snapchat reported the incident to the FBI and offered two years of identity theft monitoring and insurance to affected employees.
California clockDiscovered Feb 26, 2016 → Notified Mar 1, 20164d ✓ CA 60-day OK7 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-60310
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 4, 2016
- Raw hash
- ddb9aff43035e295380fd04b786a23e223be9b134f43b8057387a523cb1f54e9
Reporting entity
- Name
- Snapchatnorm: snapchat
- Domain
- snapchat.com
Victim entity
- Name
- Snapchatnorm: snapchat
- Domain
- snapchat.com
Incident
- Discovered
- Feb 26, 2016
- Materiality determined
- —
- Notification sent
- Mar 1, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Reported it to the Federal Bureau of Investigation
- Initial access
- phishing_link
Compliance
- Time to disclose
- 7 days(7 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 4d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 26, 2016→ Notified: Mar 1, 20164d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.