MalwareRansomwareData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Central Licensing Bureau, Inc.
bd_becdc0895df7402b · schema v1 · pii pii-v1
Full breach record for Central Licensing Bureau, Inc. →Central Licensing Bureau, Inc. experienced a ransomware attack on November 29, 2021, where an unauthorized third party accessed and disabled computer systems. The incident potentially exposed names, addresses, dates of birth, Social Security numbers, and driver's license numbers. The company engaged forensic investigators, rebuilt systems, and offered credit monitoring.
California clockDiscovered Nov 29, 2021 → Notified Jul 8, 2022221d ✗ CA 60-day late32 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-555083
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 8, 2022
- Raw hash
- 803958cfb95c5591671b84cf7e49e78b38c133c1f7e799b6a4a2d7bd35f6754f
Reporting entity
- Name
- Central Licensing Bureau, Inc.norm: central licensing bureau
Victim entity
- Name
- Central Licensing Bureau, Inc.norm: central licensing bureau
Incident
- Discovered
- Nov 29, 2021
- Materiality determined
- —
- Notification sent
- Jul 8, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 32 weeks(221 days from discovery to filing)
- Compliance flags
- CA 60-day late · 221d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 29, 2021→ Notified: Jul 8, 2022221d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.