HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture App DataCustomer Data InvolvedDelayed DiscoveryPIILowResolved

Inner City Law Center

bd_b2dbc80ff36f0d0a · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 23, 2021

To disclose

—

Affected

Not disclosed

Confidence

78%

Full breach record for Inner City Law Center →

Inner City Law Center notified affected individuals of unauthorized access to one employee email account occurring between August 4, 2020 and January 26, 2021. Investigation concluded May 5, 2021. Personal information in the email account was potentially accessible. Notification letters dated July 23, 2021 offered one year of IDX identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 4, 2020

Begins

Jul 23, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Inner City Law Center
norm: inner city law center

Name: Inner City Law Center
norm: inner city law center
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Aug 4, 2020 – Jan 26, 2021
Materiality determined: —
Notification sent: Jul 23, 2021
Affected individuals: Not disclosed
Data types: PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Immediately took steps to secure the email account
Began an investigation with the assistance of an outside cybersecurity firm
Conducted a thorough review of all emails and attachments that were potentially accessible
Offering access to IDX's identity protection services at no cost to you for one year
Changes made: Taking steps to enhance our existing security protocols
Re-educating our staff for awareness on these types of incidents
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-543219
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 23, 2021
Raw hash: 29801983bd7119e3fa03979a8899cecafc5a4ec0ca09f11e557571a33d46759c

Reporting entityInner City Law Center

Victim entityInner City Law Center

IncidentUnauthorized Access

Stated responseImmediately took steps to secure the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov