HackingOtherStolen CredentialsCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)LowContained

Eden Housing

bd_ce49d991087afa91 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 6, 2021

Filed

Jan 7, 2022

To disclose

22 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for Eden Housing →

Eden Housing reported that an unauthorized individual accessed employee email accounts between May 18, 2021, and August 11, 2021. Suspicious activity was observed on August 6, 2021. The investigation determined that some individuals' personal information was contained in the accessed emails or attachments. Eden Housing engaged a cybersecurity firm, secured the email environment, and implemented additional security safeguards. Affected individuals were offered one year of identity theft protection services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 6, 2021 → Notified Jan 7, 2022154d ✗ CA 60-day late22 weeks discovery → filing

Incident timeline

undetected · 80 days

discovery → filing · 22 weeks / 154 days

May 18, 2021

Begins

Aug 6, 2021

Discovered

Jan 7, 2022

Filed

vs. sector median

+14 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_af7d65c37068d9ad2022-01-07Candidate
Massachusetts State AGbd_dbc7dd5ffb7e8c152022-01-07Verified

Name: Eden Housing
norm: eden housing

Name: Eden Housing
norm: eden housing
Industry: Otherllm

Discovered: Aug 6, 2021
Breach occurred: May 18, 2021 – Aug 11, 2021
Undetected for: 80 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 7, 2022
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Took steps to secure our email environment
Began an investigation
Engaged a cybersecurity firm to assist
Conducted a review of the contents of the email accounts to identify any individuals whose personal information may have been contained within the emails and attachments
Changes made: Implementation of additional security safeguards and controls in our network infrastructure
Offering a complimentary one-year membership in identity theft protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(154 days from discovery to filing)
Compliance flags: CA 60-day late · 154d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 6, 2021
→ Notified: Jan 7, 2022
154d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 6, 2021 → Notified: Jan 7, 2022	154d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGJan 7 · first

Massachusetts State AGJan 7 · first

California State AGJan 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-549770
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 7, 2022
Raw hash: 3415d4630a5071dae43197744103b3d401d3eff7aa6480103fcde30882e66e4e

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityEden Housing

Victim entityEden Housing

Incidentdiscovered Aug 6, 2021

Stated responseTook steps to secure our email environment

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov