HackingGovernmentGovernmentData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIdentity (basic)LowContained

City of El Cerrito, California

bd_df04d5444ea64caa · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Apr 12, 2024

To disclose

—

Affected

Not disclosed

Linked

3 records

Confidence

69%

The City of El Cerrito, California experienced unauthorized access to its network between June 1 and June 7, 2023. A cybersecurity firm was engaged to investigate. Affected files contained personal information including names and other data elements. Notification letters were sent to affected individuals in March 2024, approximately nine months after the incident. Complimentary Experian IdentityWorks credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jun 1, 2023

Begins

Apr 12, 2024

Filed

This filing is one of 3 records about the same incident.View merged incident

A leak claim by lockbit_3 about this victim was first seen 247 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (2)

Leak Sitelockbit_3bd_5902367df54c38e42023-08-09 · +246dVerified
Leak Sitedispossessorbd_bd112f2bdb7bb7432023-08-09 · +246dCandidate

Name: City of El Cerrito, California
norm: city of el cerrito
Domain: el-cerrito.org

Name: City of El Cerrito, California
norm: city of el cerrito
Domain: el-cerrito.org
Industry: Governmentllm

Discovered: —
Breach occurred: Jun 1, 2023 – Jun 7, 2023
Materiality determined: —
Notification sent: Mar 28, 2024
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1074 Data Staged
Threat actor: External
Regulator citations: Filed breach notification with California Office of the Attorney General

During the incident: Took steps to secure our network
Commenced an investigation
Engaged a cybersecurity firm to assist
Conducted a careful review of the files in the folders that were involved
Completed steps to locate addresses and verify other information so that we could notify you
Arranged for complimentary one-year membership to Experian's IdentityWorks credit monitoring service
Changes made: Implementing additional safeguards and security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-583864
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 12, 2024
Raw hash: c4f105a45194d93fcde65798ea03a0b657951a48b62f482c475d579e3bf1c6bf

Linked disclosures

Ransomware claims (2)

Reporting entityCity of El Cerrito, California

Victim entityCity of El Cerrito, California

IncidentUnauthorized Access

Stated responseTook steps to secure our network

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov