HackingGovernmentGovernmentStolen CredentialsCapture App DataBECData ExfiltratedWire FraudEmployee Data InvolvedCustomer Data InvolvedMulti-Stage ChainPIIGovernment IDIdentity (basic)Financial accountHealth (basic)PHIMediumContained

Bay Area Air Quality Management District

bd_83892a2febee5ca7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 25, 2018

To disclose

—

Affected

Not disclosed

Confidence

83%

Full breach record for Bay Area Air Quality Management District →

Bay Area Air Quality Management District notified affected individuals of a data breach in which overseas hackers accessed employee email accounts between January 10 and February 7, 2018. Social Security numbers, driver's license numbers, credit card numbers, medical information, and health insurance information were exposed. The hackers attempted fraudulent wire transfers but were blocked by internal controls. Two years of identity protection via AllClear ID was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 10, 2018

Begins

May 25, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Bay Area Air Quality Management District
norm: bay area air quality management district

Name: Bay Area Air Quality Management District
norm: bay area air quality management district
Industry: Governmentllm

Discovered: —
Breach occurred: Jan 10, 2018 – Feb 7, 2018
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIGovernment IDIdentity (basic)Financial accountHealth (basic)PHI
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email CollectionT1566 Phishing
Threat actor: ExternalFinancial

During the incident: Secured its email system
Took further technical and administrative steps to prevent a recurrence of such an attack
Prevented fraudulent wire transfers through internal payment controls
Will provide two years of credit monitoring services through a service provider
Arranged to have AllClear ID protect identity for 24 months at no cost
Changes made: Taken further technical and administrative steps to prevent a recurrence of such an attack and to protect the privacy of the Air District's employees, members of its Board of Directors, Hearing Board and Advisory Council, as well as its constituents
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-136551
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 25, 2018
Raw hash: bdeba94bbaf3a4f837769bc0beef2c87b46b557b193bad44071a98ddd95b76f2

Reporting entityBay Area Air Quality Management District

Victim entityBay Area Air Quality Management District

IncidentUnauthorized Access

Stated responseSecured its email system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov