DisclosureLens
HackingTransportation & LogisticsTransportationStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)PIILowContained

Alameda-Contra Costa Transit District

bd_948719381df6f556 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 16, 2020

Filed

Mar 15, 2021

To disclose

39 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

65%
Full breach record for Alameda-Contra Costa Transit District →

Alameda-Contra Costa Transit District (AC Transit) notified customers that unauthorized access occurred to a limited number of employee email accounts between April 7, 2020, and June 16, 2020. The investigation, completed around January 4, 2021, determined that some customer personal information, including names, was contained in the affected emails. AC Transit reset credentials, engaged forensic investigators, and is enhancing security protocols and staff training. Complimentary identity protection services were offered.

California clockDiscovered Jun 16, 2020 → Notified Jan 4, 2021202d ✗ CA 60-day late39 weeks discovery → filing

Incident timeline

undetected · 70 days
discovery → filing · 39 weeks / 272 days

Apr 7, 2020

Begins

Jun 16, 2020

Discovered

Mar 15, 2021

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Montana State AGMar 11 · first
Indiana State AGMar 11 · first
California State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.