HackingCustomer Data InvolvedCREDENTIALSIDENTITY_BASICHighContained
Ancestry.com Operations, Inc.
bd_9e52af991ea46d8c · schema v1 · pii pii-v1
Full breach record for Ancestry.com Operations, Inc. →Ancestry.com Operations, Inc. disclosed that a security researcher reported a file containing 300,000 RootsWeb username/email and password combinations. The incident was discovered on December 20, 2017. Approximately 55,000 users had overlapping credentials with Ancestry commercial sites. Ancestry locked affected accounts, took RootsWeb offline, and initiated a forensic investigation. No sensitive financial or government ID data was exposed.
California clockDiscovered Dec 20, 2017 → Notified Dec 23, 20173d ✓ CA 60-day OK3 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed300,000 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-131600
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 23, 2017
- Raw hash
- d0708b962641e015aacb0e86383f916a091f850845dbbec7b00198a670f46f4f
Reporting entity
- Name
- Ancestry.com Operations, Inc.norm: ancestrycom operations
- Domain
- ancestry.com
Victim entity
- Name
- Ancestry.com Operations, Inc.norm: ancestrycom operations
- Domain
- ancestry.com
Incident
- Discovered
- Dec 20, 2017
- Materiality determined
- —
- Notification sent
- Dec 23, 2017
- Affected individuals
- 300,000
- Data types
- CREDENTIALSIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 3 days(3 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 3d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 20, 2017→ Notified: Dec 23, 20173d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.