MalwareRansomwareData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
CCPOA Benefit Trust Fund
bd_e73fb3771eb4bcef · schema v1 · pii pii-v1
Full breach record for CCPOA Benefit Trust Fund →CCPOA Benefit Trust Fund experienced a ransomware attack discovered on September 2, 2020. The attacker exfiltrated personally identifiable information, including names, addresses, dates of birth, and Social Security Numbers. No medical information was involved. The organization shut down systems, engaged forensic investigators, notified law enforcement, and offered one year of identity monitoring to affected individuals.
California clockDiscovered Sep 2, 2020 → Notified Oct 30, 202058d ✓ CA 60-day OK8 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_13a5974b34d46bc6HHS OCRfiled 2020-10-29Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-195678
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 29, 2020
- Raw hash
- 67b837c0f25022a790020b2de99d8a817ae7e7a75a4038288f74f8665e3666a6
Reporting entity
- Name
- CCPOA Benefit Trust Fundnorm: ccpoa benefit
Victim entity
- Name
- CCPOA Benefit Trust Fundnorm: ccpoa benefit
Incident
- Discovered
- Sep 2, 2020
- Materiality determined
- —
- Notification sent
- Oct 30, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 58d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 2, 2020→ Notified: Oct 30, 202058d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.