HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
The AFTRA Retirement Fund
bd_7977ec6849d8afaa · schema v1 · pii pii-v1
Full breach record for The AFTRA Retirement Fund →AFTRA Retirement Fund reported unauthorized access to its network between October 24 and 28, 2019. Suspicious activity was detected, leading to an investigation with a third-party forensic expert. While no evidence confirmed access to member files, the scope could not be ruled out. Potentially affected data includes identity and financial information. The fund offered 12 months of complimentary identity monitoring via Kroll and notified HHS OCR.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2c0928d8cd6c12b3Montana State AGfiled 2020-02-25Verified
- bd_3827b8b1b244c4f0Washington State AGfiled 2020-02-25Verified
- bd_9ca97b1dae525054HHS OCRfiled 2020-02-25Verified
- bd_fa2dfc25d9f345f5Oregon State AGfiled 2020-02-25Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-187705
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 25, 2020
- Raw hash
- 8ff74d27c7cc09e3248436ae740a7b7d042272bbaae5b43acc2d20f13cc90abe
Reporting entity
- Name
- The AFTRA Retirement Fundnorm: the aftra retirement
Victim entity
- Name
- The AFTRA Retirement Fundnorm: the aftra retirement
Incident
- Discovered
- Oct 28, 2019
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- notify the Office of Civil Rights at the Department of Health and Human Services
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.