Social EngineeringPhishingEmployee Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
ESSEX PROPERTY TRUST, INC.
bd_8f137e6cc2295ccc · schema v1 · pii pii-v1
Full breach record for ESSEX PROPERTY TRUST, INC. →Essex Property Trust, Inc. disclosed that on March 17, 2016, it was the victim of a phishing attack resulting in the release of employee W-2 tax forms for the 2015 tax year. The affected information included names, addresses, Social Security numbers, and financial data such as wages and taxes withheld. The company reported the incident to law enforcement and the IRS, conducted an internal review, and offered 12 months of identity protection services to affected employees.
California clockDiscovered Mar 17, 2016 → Notified Mar 28, 201611d ✓ CA 60-day OK21 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-60880
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 7, 2016
- Raw hash
- fca7ef5e3945252bd09998d9189eb0e8ded9885fcd6221dab8a8428b6235f44e
Reporting entity
- Name
- ESSEX PROPERTY TRUST, INC.norm: essex property
- Domain
- essexproperty.com
Victim entity
- Name
- ESSEX PROPERTY TRUST, INC.norm: essex property
- Domain
- essexproperty.com
Incident
- Discovered
- Mar 17, 2016
- Materiality determined
- —
- Notification sent
- Mar 28, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 Phishing
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported the incident to law enforcementReported the incident to the IRS
- Initial access
- phishing_link
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 11d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 17, 2016→ Notified: Mar 28, 201611d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.