HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIALMediumContained
Campbell Taylor & Company
bd_dcf25a475804dc0b · schema v1 · pii pii-v1
Full breach record for Campbell Taylor & Company →Campbell Taylor & Company experienced unauthorized access to its main network drive from a foreign IP address between January 27 and February 2, 2017. The incident involved a possible ransomware attempt. Data potentially exposed included names, dates of birth, Social Security numbers, and salary information. The company hired forensic investigators, notified law enforcement (FBI, IRS), and offered 12 months of credit monitoring.
California clockDiscovered Feb 13, 2017 → Notified Mar 21, 201736d ✓ CA 60-day OK5 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_025f57f933cf1995New Hampshire State AGfiled 2017-03-18Verified
- bd_405b9666afe8b2e8Montana State AGfiled 2017-03-21(3d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-67009
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2017
- Raw hash
- 3a9490c1de48f77abe32d0d61ea86234094ab91edf6fae08f44dbe3cff77c5fd
Reporting entity
- Name
- Campbell Taylor & Companynorm: campbell taylor
Victim entity
- Name
- Campbell Taylor & Companynorm: campbell taylor
Incident
- Discovered
- Feb 13, 2017
- Materiality determined
- —
- Notification sent
- Mar 21, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the FBINotified the IRSNotified the FTBNotified the applicable state agencies
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 36d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 13, 2017→ Notified: Mar 21, 201736d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.