California Casualty Indemnity Exchange
bd_733c4b46f0e5b0b9 · schema v1 · pii pii-v1
Full breach record for California Casualty Indemnity Exchange →California Casualty Indemnity Exchange reported an unauthorized access incident where an external actor accessed its IT network between September 2 and September 8, 2025, and copied files containing customer information. The company isolated systems, engaged a third-party cybersecurity firm, and notified law enforcement. On November 5, 2025, it determined that customer data was involved and began notifying affected individuals, offering two years of complimentary Experian IdentityWorks identity protection services. The company has implemented additional safeguards to prevent recurrence.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0b58f414de4f11efIndiana State AGfiled 2025-11-19Verified
- bd_0fe6ca1586857271Maine State AGfiled 2025-11-19Candidate
- bd_a74d5b54acf41447Oregon State AGfiled 2025-11-19Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-614461
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 19, 2025
- Raw hash
- 86b02a80b75356337579097fb968d94c2bdad376c01f3eba4e4ebc01ae0826a8
Reporting entity
- Name
- California Casualty Indemnity Exchangenorm: california casualty indemnity exchange
Victim entity
- Name
- California Casualty Indemnity Exchangenorm: california casualty indemnity exchange
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Nov 5, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.