HackingTechnologyInformationStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedCredentialsIdentity (basic)LowContained

Internet Corporation for Assigned Names and Numbers - ICANN

bd_df7686f2da957416 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Aug 12, 2015

To disclose

—

Affected

Not disclosed

Confidence

65%

Full breach record for Internet Corporation for Assigned Names and Numbers - ICANN →

ICANN disclosed that usernames, email addresses, and encrypted passwords for ICANN.org profile accounts were obtained by an unauthorized person via an external service provider. The breach occurred on July 31, 2015. No internal systems or financial data were accessed. ICANN required users to reset passwords.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 31, 2015

Begins

Aug 12, 2015

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Internet Corporation for Assigned Names and Numbers - ICANN
norm: internet corporation for assigned names and numbers icann
Domain: icann.org

Name: Internet Corporation for Assigned Names and Numbers - ICANN
norm: internet corporation for assigned names and numbers icann
Domain: icann.org
Industry: Technologyllm

Discovered: —
Breach occurred: Jul 31, 2015
Materiality determined: —
Notification sent: Aug 5, 2015
Affected individuals: Not disclosed
Data types: CredentialsIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Third party: via external service provider
Initial access: supply_chain

During the incident: Requiring that you reset your password
Contact us at [REDACTED-EMAIL]
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-57383
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 12, 2015
Raw hash: 3c04fd0ada8ce795ed74768cbb1109791b48c8f222c00d435804072056acaec4

Reporting entityInternet Corporation for Assigned Names and Numbers - ICANN

Victim entityInternet Corporation for Assigned Names and Numbers - ICANN

IncidentThird-Party / Supply Chain

Stated responseRequiring that you reset your password

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov