AccidentalProfessional ServicesProfessional ServicesMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

The Information and Referral Federation of Los Angeles County, Inc.

bd_a633b5e85ffd659a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 5, 2018

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for The Information and Referral Federation of Los Angeles County, Inc. →

211 LA County notified the California Attorney General of a data breach caused by an employee misconfiguration that exposed a database containing names, Social Security numbers, and driver's license numbers to the internet between March 14 and April 23, 2018. The organization restricted access, hired a security firm, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 14, 2018

Begins

Jul 5, 2018

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_c71e6d22a616dfc82018-07-05Verified

Name: The Information and Referral Federation of Los Angeles County, Inc.
norm: the information and referral federation of los angeles county

Name: The Information and Referral Federation of Los Angeles County, Inc.
norm: the information and referral federation of los angeles county
Also named: The Information and Referral Federation of Los Angeles County, Inc.dba oflegal entity
211 LA Countydba oftrade name
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Mar 14, 2018 – Apr 23, 2018
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Misconfiguration

During the incident: Immediately initiated an internal review
Reconfigured and restricted external access to the information
Hired a leading computer security firm to help determine how this happened and the extent of the incident
Changes made: Reconfigured processes and procedures so that this information is no longer accessible from the internet
Added additional security to our internet-based storage platforms
Providing additional and ongoing staff data security training
Reviewing existing security and privacy policies
Enhanced the security protections we already have in place
Offering a complimentary one-year membership to Experian’s IdentityWorks Credit 3B
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJul 5 · first

California State AGJul 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-137700
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2018
Raw hash: fbba410f1ca2e2834a9c3a24f987845b17cc248b7757219baf62a4a0290a80e8

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityThe Information and Referral Federation of Los Angeles County, Inc.

Victim entityThe Information and Referral Federation of Los Angeles County, Inc.

IncidentMisconfiguration

Stated responseImmediately initiated an internal review

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov