HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Cucamonga Valley Water District (cvwdwater.com)
bd_927ac56cebf81df9 · schema v1 · pii pii-v1
Full breach record for Cucamonga Valley Water District (cvwdwater.com) →Cucamonga Valley Water District (CVWD) reported a security incident involving its online payment vendor, Click2Gov. Between August 26, 2019, and October 14, 2019, an unauthorized script was placed in the web payment portal code, potentially exposing customer names, billing addresses, and credit card information. CVWD and Click2Gov engaged forensic investigators and notified the FBI. No evidence of actual misuse was found at the time of notification. CVWD offered 12 months of credit monitoring to affected customers.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-184838
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 4, 2019
- Raw hash
- 2a10dd2d8140b2e5e5ada00c168bcce133c8389cd6a03255fecd9e69cc3a4454
Reporting entity
- Name
- Cucamonga Valley Water District (cvwdwater.com)norm: cucamonga valley water district cvwdwatercom
- Domain
- cvwdwater.com
Victim entity
- Name
- Cucamonga Valley Water District (cvwdwater.com)norm: cucamonga valley water district cvwdwatercom
- Domain
- cvwdwater.com
Incident
- Discovered
- Nov 6, 2019
- Materiality determined
- Aug 26, 2019
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.