PhysicalGovernmentGovernmentTheftEmployee Data InvolvedGovernment IDIdentity (basic)EmploymentMediumContained

Humboldt County, CA - Official Website

bd_dea0f342842a7549 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 7, 2017

Filed

Dec 1, 2017

To disclose

12 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Humboldt County, CA - Official Website →

County of Humboldt notified employees and dependents that payroll documents containing names and Social Security numbers were recovered by the Sheriff's Office on September 7, 2017, during a search warrant execution in Trinity County. The incident involved the physical loss/theft of records. The County engaged forensic experts, conducted a record audit, and offered one year of credit monitoring. Remediation includes strengthening records management policies.

J jump to incidentP pin to compareR raw source

California clockDiscovered Sep 7, 2017 → Notified Nov 29, 201783d ✗ CA 60-day late12 weeks discovery → filing

Incident timeline

discovery → filing · 12 weeks / 85 days

Sep 7, 2017

Discovered

Dec 1, 2017

Filed

vs. sector median

+1 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Humboldt County, CA - Official Website
norm: humboldt county ca official website
Domain: humboldtgov.org

Name: Humboldt County, CA - Official Website
norm: humboldt county ca official website
Domain: humboldtgov.org
Industry: Governmentllm

Discovered: Sep 7, 2017
Materiality determined: —
Notification sent: Nov 29, 2017
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Employment
Data elements: Social Security number
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Notified the California Attorney General’s Office

During the incident: Launched an investigation in conjunction with the Sheriff’s Office
Engaged outside experts that specialize in data loss and recovery
Conducted audit of the records to determine what information was contained
Offering a free one-year membership of Experian IdentityWorks Credit 3B
Set up a dedicated and confidential toll-free response line
Changes made: Expanding and strengthening its records management and storage policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: CA 60-day late · 83d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Sep 7, 2017
→ Notified: Nov 29, 2017
83d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Sep 7, 2017 → Notified: Nov 29, 2017	83d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-119438
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 1, 2017
Raw hash: 5fcc577f0af68e1a84436c513cf72e3b6faab6721b08aad500a9b61a0acb653d

Reporting entityHumboldt County, CA - Official Website

Victim entityHumboldt County, CA - Official Website

Incidentdiscovered Sep 7, 2017

Stated responseLaunched an investigation in conjunction with the Sheriff’s Office

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov