MisusePrivilege AbuseData MishandlingEmployee Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
My Apps
bd_853e24852657f87c · schema v1 · pii pii-v1
Full breach record for My Apps →My Life Foundation notified employees of a data breach involving insider misuse. Former employee Tim DeHaven and current employee Erik Duzell, Sr. conspired to steal company files and provide unauthorized access to 3D Supports, LLC. The incident was discovered in September 2021, with activity continuing until November 2021. Affected data included names, SSNs, bank account numbers, and other PII. The company terminated the involved employees, obtained a court order for data return, and offered identity protection services.
California clockDiscovered Sep 1, 2021 → Notified Oct 25, 2022419d ✗ CA 60-day late14 months discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-558839
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 2, 2022
- Raw hash
- 59e17bc72a57c801098c783f04c952b70c5e6218a403d4d1ade290e5767dcc1f
Reporting entity
- Name
- My Life Foundationnorm: my life
- Domain
- mlfmd.org
Victim entity
- Name
- My Appsnorm: my apps
- Domain
- myapplications.microsoft.com
Incident
- Discovered
- Sep 1, 2021
- Materiality determined
- —
- Notification sent
- Oct 25, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Insider
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- Internal
- Third party
- via 3D Supports, LLC
- Initial access
- insider_action
Compliance
- Time to disclose
- 14 months(427 days from discovery to filing)
- Compliance flags
- CA 60-day late · 419d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 1, 2021→ Notified: Oct 25, 2022419d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.