HackingStolen CredentialsPhishingEmployee Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICCREDENTIALSMediumContained
Walker Advertising, LLC
bd_7baacaae4f873b2d · schema v1 · pii pii-v1
Full breach record for Walker Advertising, LLC →Walker Advertising, LLC experienced a security incident between January 29 and February 22, 2018, where two senior employees' corporate email accounts were hacked. The attacker used these accounts to send phishing emails to solicit access credentials. Potentially compromised data includes names, Social Security numbers, driver's license numbers, medical information, and health insurance information. The company isolated accounts, locked out the hacker, reset credentials, enabled MFA, and offered one year of identity protection via Experian.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-135102
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 9, 2018
- Raw hash
- d9da65a59c9ec8d556bbae019a33c66214540a4da0c49728c6a204e15b1cca23
Reporting entity
- Name
- Walker Advertising, LLCnorm: walker advertising
- Domain
- walkeradvertising.com
Victim entity
- Name
- Walker Advertising, LLCnorm: walker advertising
- Domain
- walkeradvertising.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Apr 9, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported the unlawful activity to the Federal Bureau of Investigation (FBI)
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.