HackingGovernmentGovernmentCapture Stored DataAnonymousData ExfiltratedData PublishedActor NamedCustomer Data InvolvedTargetedPIIIdentity (basic)Government IDFinancial accountMediumContained

State of California Department of Justice

bd_9be27c05d8395549 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 11, 2012

To disclose

—

Affected

Not disclosed

Confidence

81%

Full breach record for State of California Department of Justice →2 incidents on file

In November 2011, hackers affiliated with the group Anonymous accessed and released private email accounts belonging to a retired California Department of Justice agent who was a member of the CATCH task force. The released emails contained personal information including names, addresses, dates of birth, Social Security numbers, and in some cases financial account or credit card numbers of individuals whose identity theft case files were stored in those emails.

J jump to incidentP pin to compareR raw source

Incident timeline

Nov 1, 2011

Begins

May 11, 2012

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name

Name: State of California Department of Justice
norm: state of california department of justice
Domain: oag.ca.gov
Industry: Governmentllm

Discovered: —
Breach occurred: Nov 1, 2011 – Nov 30, 2011
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access· Anonymous
MITRE ATT&CK: T1078 Valid AccountsT1114 Email CollectionT1041 Exfiltration Over C2 Channel
Threat actor: AnonymousExternalIdeology

During the incident: Sent notification letters to affected individuals
Recommended affected individuals place a fraud alert on their credit files
Provided contact information for the three major credit reporting agencies (Experian, Equifax, TransUnion)
Changes made: Provided Privacy Protection Recommendations enclosure to affected individuals advising on credit monitoring and fraud alert steps
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-23155
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 11, 2012
Raw hash: 3f77cbd77e94c208ac39e57a69ea1647d32922a8486d7580b2e1d834a300791a

Reporting entity

Victim entityState of California Department of Justice

IncidentUnauthorized Access

Stated responseSent notification letters to affected individuals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov