HackingCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Harbor Developmental Disabilities Foundation
bd_818cdfa0c33f731b · schema v1 · pii pii-v1
Full breach record for Harbor Developmental Disabilities Foundation →Harbor Developmental Disabilities Foundation (d/b/a Harbor Regional Center) notified the California Attorney General of a data breach occurring on March 6-7, 2026. The organization became aware of unusual network activity on March 7, 2026. An investigation revealed that an unauthorized individual accessed certain personal information. The incident is contained. Affected individuals are offered 12 months of credit monitoring and fraud assistance services.
California clockDiscovered Mar 7, 2026 → Notified Jul 13, 2026128d ✗ CA 30-day late18 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_5a812851b43801ceCalifornia State AGfiled 2026-05-28(46d gap)Candidate
- bd_7b9cece4187569a9HHS OCRfiled 2026-04-22(82d gap)Verified
- bd_9b166fd801f03fafIndiana State AGfiled 2026-04-22(82d gap)Verified
- bd_d9e6069e2c2c9535California State AGfiled 2026-04-22(82d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-626408
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 13, 2026
- Raw hash
- 9b6bc9b05ae4b1dcf218fb3e41436176eb6f8663b9fa69a64c0bc4f4ead6f531
Reporting entity
- Name
- Harbor Developmental Disabilities Foundationnorm: harbor developmental disabilities
Victim entity
- Name
- Harbor Developmental Disabilities Foundationnorm: harbor developmental disabilities
Incident
- Discovered
- Mar 7, 2026
- Materiality determined
- —
- Notification sent
- Jul 13, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Submitted breach notification to California Attorney General
Compliance
- Time to disclose
- 18 weeks(128 days from discovery to filing)
- Compliance flags
- CA 30-day late · 128dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 7, 2026→ Notified: Jul 13, 2026128d 30 calendar days CA 30-day late California Consumers notified: Jul 13, 2026→ AG copy submitted: Jul 13, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.