HackingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Bay Bridge Administrators
bd_868a3feb8eb3d942 · schema v1 · pii pii-v1
Full breach record for Bay Bridge Administrators →Bay Bridge Administrators, LLC notified the California AG of a data breach where an unknown actor gained access to its network prior to August 25, 2022, and exfiltrated data on September 3, 2022. The incident was discovered on September 5, 2022. Affected data includes names, SSNs, driver's licenses, dates of birth, and medical/health insurance information. The company engaged a cybersecurity firm, secured the network, notified law enforcement, and offered 24 months of credit monitoring.
California clockDiscovered Sep 5, 2022 → Notified Dec 29, 2022115d ✗ CA 60-day late16 weeks discovery → filing
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_3e79034e4a2a5985Leak Siteredalertfiled 2022-09-22(98d gap)Verified by operator
Regulatory filings (6) · sorted by filing gap
- bd_41fc712ff0e60b1fNew Hampshire State AGfiled 2022-12-29Verified
- bd_76eac57a123a9658Montana State AGfiled 2022-12-29Verified by operator
- bd_867688de2ddd81a7Washington State AGfiled 2022-12-29Verified
- bd_d303951afc2ff846Oregon State AGfiled 2022-12-29Verified by operator
Show 2 more filings ↓Show fewer ↑up to 1d gap
- bd_e3985ce504723a98Maine State AGfiled 2022-12-29Verified by operator
- bd_2076fcfdead4ed37HHS OCRfiled 2022-12-30(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-560525
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 29, 2022
- Raw hash
- 0a21687ec8cd8da3659b1507c483405b2e2cadb7c3ef89a8039fcbee6e368aeb
Reporting entity
- Name
- Bay Bridge Administratorsnorm: bay bridge administrators
- Domain
- bbadmin.com
Victim entity
- Name
- Bay Bridge Administratorsnorm: bay bridge administrators
- Domain
- bbadmin.com
Incident
- Discovered
- Sep 5, 2022
- Materiality determined
- —
- Notification sent
- Dec 29, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 16 weeks(115 days from discovery to filing)
- Compliance flags
- CA 60-day late · 115dLeak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 5, 2022→ Notified: Dec 29, 2022115d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.