Catholic Charities CYO of The Archdiocese of San Francisco
bd_b382295877ac58f8 · schema v1 · pii pii-v1
Full breach record for Catholic Charities CYO of The Archdiocese of San Francisco →3 incidents on fileCatholic Charities CYO of the Archdiocese of San Francisco reported an external system breach (hacking) occurring between September 13 and 29, 2023. The incident was discovered on July 31, 2024, affecting 7,168 individuals, including 1 Maine resident. Personal information, including government identifiers, was compromised. The organization engaged external cybersecurity professionals and offered 12 months of credit monitoring via Cyberscout/Identity Force to affected individuals.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 13, 2023
Begins
Jul 31, 2024
Discovered
Aug 30, 2024
Filed
vs. sector median
4 wks faster
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- HHS OCRbd_1770d100f6779aa42024-08-30Verified
- Montana State AGbd_389ab70a0544ce2f2024-08-30Verified
- Vermont State AGbd_934e97c045cc2b3b2024-08-30Verified
- California State AGbd_a5398ad6ee59bc882024-08-30Verified
Show 1 more filing ↓Show fewer ↑up to 7d gap
- New Hampshire State AGbd_fba3310eeb4f88d52024-09-06 · +7dVerified
Filing propagation · 6 filings · 5 states
View merged incident ↗Pattern: first filing Aug 30 (CA), last Sep 6 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.