HackingGovernmentGovernmentData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDMinorMediumContained

The City of Hesperia, CA

bd_dee4a6f30001b540 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 28, 2021

Filed

Feb 7, 2022

To disclose

10 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for The City of Hesperia, CA →2 incidents on file

On November 28, 2021, the City of Hesperia detected a sophisticated cybersecurity incident impacting its network. An unauthorized party accessed and acquired personal information, including full names and Social Security numbers for some individuals, and data pertaining to minors. The City conducted an internal investigation and notified law enforcement. The investigation concluded on January 7, 2022. The City is offering complimentary credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 10 weeks / 71 days

Nov 28, 2021

Begins

Nov 28, 2021

Discovered

Feb 7, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: The City of Hesperia, CA
norm: the city of hesperia ca
Domain: hesperiaca.gov

Name: The City of Hesperia, CA
norm: the city of hesperia ca
Domain: hesperiaca.gov
Industry: Governmentllm

Discovered: Nov 28, 2021
Breach occurred: Nov 28, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDMinor
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Conducted an internal investigation to assess the nature and scope of the potential compromise
Notified law enforcement
Changes made: Offering a complimentary one-year membership of Experian IdentityWorks Credit 3B to affected adults
Offering a complimentary one-year membership of Experian IdentityWorks Minor Plus to affected minors
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 10 weeks(71 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-550752
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 7, 2022
Raw hash: 40344545d4a6c665a19676fc96079d4d123f6a18790bd4d207a9570659f2e1f2

Reporting entityThe City of Hesperia, CA

Victim entityThe City of Hesperia, CA

Incidentdiscovered Nov 28, 2021

Stated responseConducted an internal investigation to assess the nature and scope of the potential compromise

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov