HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASICMediumContained
Irvine Company
bd_d70fcad6becbe1bd · schema v1 · pii pii-v1
Full breach record for Irvine Company →Aon Hewitt notified the California AG of a July 2016 breach of the Core Benefit Administration (BenefitsNow) portal. An unauthorized individual accessed 55 records of Irvine Company employees, including SSNs, names, DOBs, and health plan status. Aon Hewitt offered one year of InfoArmor identity protection services.
California clockDiscovered Jul 7, 2016 → Notified Jul 7, 20160d ✓ CA 60-day OK21 weeks discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed55 affectedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-65100
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 29, 2016
- Raw hash
- aeca7b16c9587cdb356ac9b0d961258f9c2e6e2a44a0aeb06c5e23faa3077bac
Reporting entity
- Name
- AON HEWITT GROUP TRUSTnorm: aon hewitt
Victim entity
- Name
- Irvine Companynorm: irvine
- Domain
- irvinecompany.com
Incident
- Discovered
- Jul 7, 2016
- Materiality determined
- —
- Notification sent
- Jul 7, 2016
- Affected individuals
- 55
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 21 weeks(145 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 7, 2016→ Notified: Jul 7, 20160d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.