HackingProfessional ServicesProfessional ServicesVulnerability ExploitData ExfiltratedCustomer Data InvolvedTargetedIdentity (basic)Financial accountCredentialsLowContained

The Los Angeles County Bar Association

bd_b4a028d0133ab692 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 11, 2020

Filed

Jul 10, 2020

To disclose

29 days

Affected

Not disclosed

Confidence

64%

Full breach record for The Los Angeles County Bar Association →

Los Angeles County Bar Association (LACBA) experienced a website compromise between May 10, 2020, and June 11, 2020. Cybercriminals placed malicious code on LACBA.org that captured member payment card numbers, usernames, passwords, and other typed information, exfiltrating it to attacker-controlled servers. LACBA discovered the incident on June 11, 2020, after a financial institution alerted them. The organization removed the malicious code and engaged a forensic firm. Affected data includes identity basic info, financial account numbers, and credentials.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 11, 2020 → Notified Jul 10, 202029d ✓ CA 60-day OK29 days discovery → filing

Incident timeline

undetected · 32 days

discovery → filing · 29 days

May 10, 2020

Begins

Jun 11, 2020

Discovered

Jul 10, 2020

Filed

vs. sector median

15 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: The Los Angeles County Bar Association
norm: the los angeles county bar
Domain: lacba.org

Name: The Los Angeles County Bar Association
norm: the los angeles county bar
Domain: lacba.org
Industry: Professional Servicesllm

Discovered: Jun 11, 2020
Breach occurred: May 10, 2020 – Jun 11, 2020
Undetected for: 32 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 10, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Financial accountCredentials
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1056 Input CaptureT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Eliminated the code that enabled unauthorized access to the personal information
Engaged an independent forensic firm to review our systems and recommend any additional necessary changes
Began an internal investigation
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: CA 60-day OK · 29d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 11, 2020
→ Notified: Jul 10, 2020
29d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 11, 2020 → Notified: Jul 10, 2020	29d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-191887
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 10, 2020
Raw hash: ef15d304939abcc21ede243536f4fc772d74a5b98396371d8bc8f7dfb8f453db

Reporting entityThe Los Angeles County Bar Association

Victim entityThe Los Angeles County Bar Association

Incidentdiscovered Jun 11, 2020

Stated responseEliminated the code that enabled unauthorized access to the personal information

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov