MalwareGovernmentGovernmentRansomwareData EncryptedDelayed DiscoveryFinancial accountLowContained

Camrosa Water District

bd_75d78584c29eaa80 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 13, 2020

Filed

Nov 6, 2020

To disclose

12 weeks

Affected

4state residents only

Linked

3 filings

Confidence

66%

Full breach record for Camrosa Water District →

Camrosa Water District notified customers of a cyber-attack discovered on August 13, 2020, which encrypted data on certain devices. Unauthorized access to file servers occurred between August 20, 2019, and August 13, 2020. The incident potentially exposed customer bank account numbers (ACH authorization data). The District engaged a cybersecurity firm and implemented MFA, EDR, and IPS/IDS.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 359 days

discovery → filing · 12 weeks / 85 days

Aug 20, 2019

Begins

Aug 13, 2020

Discovered

Nov 6, 2020

Filed

vs. sector median

+1 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_919af406de787b162020-11-06Verified
California State AGbd_ff6b2240ef33f2122020-11-06Verified

Name: Camrosa Water District
norm: camrosa water district

Name: Camrosa Water District
norm: camrosa water district
Industry: Governmentllm

Discovered: Aug 13, 2020
Breach occurred: Aug 20, 2019 – Aug 13, 2020
Undetected for: 359 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Engaged a cybersecurity firm to assist
Took measures to address the incident and restore operations
Changes made: Deployed an endpoint threat detection and response tool
Implemented multi-factor authentication for employee access into the Camrosa network
Implemented firewall Intrusion Prevention and Intrusion Detection Systems (IPS and IDS)
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGNov 6 · first

California State AGNov 6 · first

Montana State AGNov 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/camroSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2020
Raw hash: 909e26622a4e91f7a9b8ad252b65799fd4881d5cdc0cdf105e532f0a9dedba63

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCamrosa Water District

Victim entityCamrosa Water District

Incidentdiscovered Aug 13, 2020

Stated responseEngaged a cybersecurity firm to assist

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov