HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICCREDENTIALSLowContained
Alameda-Contra Costa Transit District
bd_948719381df6f556 · schema v1 · pii pii-v1
Full breach record for Alameda-Contra Costa Transit District →Alameda-Contra Costa Transit District (AC Transit) notified the California Office of the Attorney General of a data breach involving unauthorized access to employee email accounts between April 7, 2020, and June 16, 2020. The incident involved the theft of employee names and potentially other personal information. AC Transit reset compromised credentials, engaged forensic investigators, and offered one year of complimentary credit monitoring via Experian IdentityWorks.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9d023167638599a6Maine State AGfiled 2021-03-15Candidate
- bd_1496dfeb74794abbMontana State AGfiled 2021-03-11(4d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-539112
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 15, 2021
- Raw hash
- ba8d3c7da63658dbd80df6cf333c666cce40c57005a851971d4f21e1dd3e1e14
Reporting entity
- Name
- Alameda-Contra Costa Transit Districtnorm: alameda contra costa transit district
Victim entity
- Name
- Alameda-Contra Costa Transit Districtnorm: alameda contra costa transit district
Incident
- Discovered
- Jun 16, 2020
- Materiality determined
- Aug 16, 2020
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 39 weeks(272 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.