Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPHIIDENTITY_BASICHEALTH_BASICLowContained
Sacramento County Department of Child, Family & Adult Services
bd_da40ea8ba8a75f29 · schema v1 · pii pii-v1
Full breach record for Sacramento County Department of Child, Family & Adult Services →On June 22, 2021, Sacramento County Department of Child, Family & Adult Services experienced a phishing attack where an unknown threat actor obtained employee credentials to access webmail. Exposed data included names, dates of birth, and medical health information (PHI). No SSNs or financial data were involved. The county reported the incident to law enforcement and DHS, implemented technical safeguards, and offered 12 months of identity monitoring to affected individuals.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-550329
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 25, 2022
- Raw hash
- 7db0d3599a1e0512fdce83d45d385b4ae12cb9fdd6b0e1270bb10f174376466a
Reporting entity
- Name
- Sacramento County Department of Child, Family & Adult Servicesnorm: sacramento county department of child family adult
- Domain
- saccounty.net
Victim entity
- Name
- Sacramento County Department of Child, Family & Adult Servicesnorm: sacramento county department of child family adult
- Domain
- saccounty.net
Incident
- Discovered
- Jun 22, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PHIIDENTITY_BASICHEALTH_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566 PhishingT1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported to the Sacramento Sheriff (Case #21-211501)Reported to Department of Homeland Security (Case#2021-USCERTv3142X8)
- Initial access
- phishing_link
Compliance
- Time to disclose
- 31 weeks(217 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.