Social EngineeringGovernmentGovernmentPhishingTargetedIdentity (basic)PIILowContained

Housing Authority of the County of San Bernardino

bd_7287adc2de377fe0 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 19, 2023

Filed

Jan 3, 2024

To disclose

28 weeks

Affected

7state residents only

Linked

6 filings

Confidence

65%

Full breach record for Housing Authority of the County of San Bernardino →

Housing Authority of the County of San Bernardino notified individuals of unauthorized access to an employee email account discovered on June 19, 2023. The incident may have exposed names and other personal data. The organization reset passwords, engaged forensic investigators, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 28 weeks / 198 days

Jun 19, 2023

Discovered

Jan 3, 2024

Filed

vs. sector median

+17 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_3d50aebe2c4e80192024-01-03Verified
California State AGbd_de2d36b21007fc2a2024-01-03Verified
Maine State AGbd_c794c4e88c6303122024-01-04 · +1dVerified by operator
Vermont State AGbd_405152691464335a2024-01-02 · +1dVerified

Show 1 more filing ↓up to 1d gap

Indiana State AGbd_a061da6246ee57fb2024-01-02 · +1dVerified

Name: Housing Authority of the County of San Bernardino
norm: housing authority of the county of san bernardino

Name: Housing Authority of the County of San Bernardino
norm: housing authority of the county of san bernardino
Industry: Governmentllm

Discovered: Jun 19, 2023
Materiality determined: —
Notification sent: Jan 2, 2024
Affected individuals: 7state-resident count only
Data types: Identity (basic)PII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Immediately performed a password reset for the affected account
Engaged a third-party team of forensic investigators
Took steps to secure our email tenant
Undertook a thorough investigation
Changes made: Arranged for you to enroll in, at no cost to you, an online credit monitoring service for provided by IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(198 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Vermont State AGJan 2 · first

Indiana State AGJan 2 · first

New Hampshire State AG+1d

California State AG+1d

Montana State AG+1d · this page

Maine State AG+2d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1002.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 3, 2024
Raw hash: ed359f62f0a6fc76fd9df981ceedc073272c7beacfd008311aafa5bf1eb1e1ed

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityHousing Authority of the County of San Bernardino

Victim entityHousing Authority of the County of San Bernardino

Incidentdiscovered Jun 19, 2023

Stated responseImmediately performed a password reset for the affected account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov