Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountHealth (basic)HighContained

Jewish Community Federation

bd_99db374c48866414 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 1, 2018

Filed

Sep 24, 2019

To disclose

51 weeks

Affected

1,067state residents only

Linked

2 filings

Confidence

66%

Jewish Community Federation experienced a phishing attack compromising employee email accounts. Unauthorized access occurred as early as September 12, 2018, with suspicious activity first detected in October 2018. The incident exposed personal information including names, addresses, SSNs, financial account data, driver's license numbers, and medical information for 1,067 California residents. The organization secured accounts, engaged forensic investigators, and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 1, 2018 → Notified Sep 24, 2019358d ✗ CA 60-day late51 weeks discovery → filing

Incident timeline

undetected · 19 days

discovery → filing · 51 weeks / 358 days

Sep 12, 2018

Begins

Oct 1, 2018

Discovered

Sep 24, 2019

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_a4c2bdade58d12122019-09-24Verified

Name: Jewish Community Federation
norm: jewish community federation
Domain: jewishfed.org

Name: Jewish Community Federation
norm: jewish community federation
Domain: jewishfed.org

Discovered: Oct 1, 2018
Breach occurred: Sep 12, 2018
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 24, 2019
Affected individuals: 1,067state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Reporting the event to relevant state regulators
Initial access: phishing_link

During the incident: Launched an investigation to determine the full nature and scope of the suspicious activity
Retained a leading forensic investigation firm to assist with the investigation
Changed employees’ email credentials and secured the email accounts
Reviewed the entire contents of the relevant email accounts through a manual and programmatic process
Provided written notice of this incident to all affected individuals
Providing access to credit monitoring services for twelve (12) months through Kroll
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Reset passwords for all relevant Federation accounts and systems
Reporting the event to relevant state regulators
Changes made: Implementing additional safeguards and training to its employees
Reviewing policies and procedures relating to data security
Conducting additional employee training
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 51 weeks(358 days from discovery to filing)
Compliance flags: CA 60-day late · 358d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 1, 2018
→ Notified: Sep 24, 2019
358d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 1, 2018 → Notified: Sep 24, 2019	358d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGSep 24 · first

California State AGSep 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-150797
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 24, 2019
Raw hash: 8b30436d23943f6d5d43e6a9b455e2f211123caf9024f9529f891ec3ef1562c4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityJewish Community Federation

Victim entityJewish Community Federation

Incidentdiscovered Oct 1, 2018

Stated responseLaunched an investigation to determine the full nature and scope of the suspicious activity

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov