HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Nationwide Recovery Services, Inc.
bd_72535507bc5d01a7 · schema v1 · pii pii-v1
Full breach record for Nationwide Recovery Services, Inc. →El Dorado Irrigation District notified residents of a data breach involving its third-party vendor, Nationwide Recovery Services (NRS). NRS experienced unauthorized access to its network between July 5 and July 11, 2024, after detecting suspicious activity in July 2024. The incident potentially exposed first and last names, addresses, Social Security numbers, and dates of birth. NRS implemented additional cybersecurity measures. EID provided complimentary credit monitoring and identity protection services to affected individuals. No EID systems were directly impacted.
California clockDiscovered Jul 1, 2024 → Notified May 28, 2025331d ✗ CA 60-day late47 weeks discovery → filing
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-603269
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 28, 2025
- Raw hash
- dbf24d4e12aa6d5450195a2c8dbb97372dc33fb9640136aa1fb42db89116eb56
Reporting entity
- Name
- El Dorado Irrigation Districtnorm: el dorado irrigation district
Victim entity
- Name
- Nationwide Recovery Services, Inc.norm: nationwide recovery
Incident
- Discovered
- Jul 1, 2024
- Materiality determined
- —
- Notification sent
- May 28, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Third party
- via Nationwide Recovery Services
Compliance
- Time to disclose
- 47 weeks(331 days from discovery to filing)
- Compliance flags
- CA 60-day late · 331d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 1, 2024→ Notified: May 28, 2025331d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.