MalwareRansomwareCapture Stored DataData ExfiltratedData EncryptedRansom DemandedCustomer Data InvolvedPIIPHIIDENTITY_BASICHEALTH_BASICLowContained
Golden Gate Regional Center
bd_a790ce64bf5b2815 · schema v1 · pii pii-v1
Full breach record for Golden Gate Regional Center →Golden Gate Regional Center experienced a ransomware incident on September 23, 2020. The organization detected unusual activity, disabled its network, and engaged forensic investigators. Preliminary findings indicated that certain personal and protected health information of individuals served was acquired by an unknown actor. The organization notified the FBI and offered one year of complimentary identity monitoring services to affected individuals.
California clockDiscovered Sep 23, 2020 → Notified Nov 20, 202058d ✓ CA 60-day OK8 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-196372
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 20, 2020
- Raw hash
- d11728cc4a616fd0c2d914028c01a420104922a22d67da352b1451a524954185
Reporting entity
- Name
- Golden Gate Regional Centernorm: golden gate regional center
- Domain
- ggrc.org
Victim entity
- Name
- Golden Gate Regional Centernorm: golden gate regional center
- Domain
- ggrc.org
Incident
- Discovered
- Sep 23, 2020
- Materiality determined
- —
- Notification sent
- Nov 20, 2020
- Affected individuals
- Not disclosed
- Data types
- PIIPHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Federal Bureau of Investigation (FBI)
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 58d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 23, 2020→ Notified: Nov 20, 202058d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.