HackingRetail & ConsumerRetailStolen CredentialsCapture App DataCustomer Data InvolvedDelayed DiscoveryData ExfiltratedPIIIdentity (basic)LowContained

Northgate Gonzalez, LLC

bd_ca32a22ca82e5d36 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 17, 2020

To disclose

—

Affected

Not disclosed

Confidence

74%

Full breach record for Northgate Gonzalez, LLC →

Northgate Gonzalez, LLC discovered unauthorized access to a certain employee's email account, with access occurring between January 7, 2019 and January 7, 2020. Forensic investigators were engaged, and the review concluded on April 7, 2020. Personal information of affected individuals was present in the compromised email account. Affected individuals were offered 12 months of identity monitoring services through Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 7, 2019

Begins

Jul 17, 2020

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Northgate Gonzalez, LLC
norm: northgate gonzalez

Name: Northgate Gonzalez, LLC
norm: northgate gonzalez
Industry: Retail & Consumerllm

Discovered: —
Breach occurred: Jan 7, 2019 – Jan 7, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified certain state regulators of the incident as required

During the incident: Immediately launched an investigation, with the aid of forensic investigators, to determine the nature and scope of the activity
Began reviewing the affected email account to determine what, if any, sensitive information it contained
Notified certain state regulators of the incident as required
Providing access to twelve (12) months of identity monitoring services through Kroll at no cost to affected individuals
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-192131
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 17, 2020
Raw hash: c79eb9ab76d730b24e7afa7bb947d1579210cded61ef64f7fb907df0c2dd0bdf

Reporting entityNorthgate Gonzalez, LLC

Victim entityNorthgate Gonzalez, LLC

IncidentUnauthorized Access

Stated responseImmediately launched an investigation, with the aid of forensic investigators, to determine the nature and scope of the activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov