Social EngineeringPhishingEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Aspiranet
bd_922e45aa4f2f6d88 · schema v1 · pii pii-v1
Full breach record for Aspiranet →On March 21, 2016, Aspiranet was targeted by an email spoofing scam. The incident resulted in the inadvertent disclosure of W-2 information (name, address, SSN) for current and former employees to a third party. Aspiranet detected the incident within 30 minutes, confirmed it was isolated, and offered two years of identity protection. Remediation includes policy reviews and employee training.
California clockDiscovered Mar 21, 2016 → Notified Mar 28, 20167d ✓ CA 60-day OK4 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-60715
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2016
- Raw hash
- ae2d7f26ec610836d9100a603efc49ccc56653263fdc09c24ec8d57f5c0109c4
Reporting entity
- Name
- Aspiranetnorm: aspiranet
- Domain
- aspiranet.org
Victim entity
- Name
- Aspiranetnorm: aspiranet
- Domain
- aspiranet.org
Incident
- Discovered
- Mar 21, 2016
- Materiality determined
- —
- Notification sent
- Mar 28, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Contacted the relevant authorities
- Initial access
- phishing_link
Compliance
- Time to disclose
- 4 days(4 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 7d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 21, 2016→ Notified: Mar 28, 20167d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.