MalwareGovernmentGovernmentRansomwareData EncryptedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)BiometricEmploymentEducationPIIMediumContained

Caddo Parish District Attorney's Office

bd_ea8eb42d9f02edad · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 25, 2021

Filed

Mar 15, 2022

To disclose

20 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

65%

Full breach record for Caddo Parish District Attorney's Office →

The Caddo Parish District Attorney’s Office experienced a malware incident on October 25, 2021, resulting in unauthorized access to certain files and folders. The investigation determined that computers were infected by malware, potentially exposing personal information including names, addresses, SSNs, financial data, and health information for employees and beneficiaries. The organization implemented security measures and offered credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 25, 2021 → Notified Mar 15, 2022141d ✗ CA 60-day late20 weeks discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 20 weeks / 141 days

Oct 24, 2021

Begins

Oct 25, 2021

Discovered

Mar 15, 2022

Filed

vs. sector median

+9 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_b5ac3762446f08f12022-03-15Candidate
Montana State AGbd_a0a81e8fd67b69792022-03-16 · +1dCandidate
New Hampshire State AGbd_994d72710fe9e0132022-03-21 · +6dVerified
Massachusetts State AGbd_c26f05b3b141e7022022-03-23 · +8dVerified

Show 1 more filing ↓up to 15d gap

Indiana State AGbd_59451db148737e582022-03-30 · +15dVerified

Name: Caddo Parish District Attorney's Office
norm: caddo parish district attorney s office

Name: Caddo Parish District Attorney's Office
norm: caddo parish district attorney s office
Industry: Governmentllm

Discovered: Oct 25, 2021
Breach occurred: Oct 24, 2021 – Nov 4, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Mar 15, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancial credentialsHealth (basic)BiometricEmploymentEducationPII
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1078 Valid Accounts
Threat actor: External
Regulator citations: Reporting to regulatory officials, as required

During the incident: Launched an investigation to determine the nature and scope of the incident
Took steps to ensure the security of our systems
Implementing additional technical security measures to strengthen the security of our systems
Reviewing and enhancing our existing data privacy policies and procedures
Offering access to twelve (12) months of credit monitoring and identity theft protection services through Equifax at no cost
Established a dedicated call center for individuals to contact with questions or concerns
Changes made: Implementing additional technical security measures to strengthen the security of our systems
Reviewing and enhancing our existing data privacy policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 weeks(141 days from discovery to filing)
Compliance flags: CA 60-day late · 141d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 25, 2021
→ Notified: Mar 15, 2022
141d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 25, 2021 → Notified: Mar 15, 2022	141d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGMar 15 · first

California State AGMar 15 · first · this page

Montana State AG+1d

New Hampshire State AG+6d

Massachusetts State AG+8d

Indiana State AG+15d

Pattern: first filing Mar 15 (ME), last Mar 30 (IN) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-551720
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 15, 2022
Raw hash: 77ae480b7e7413257a18951d23444f87493d211416978baafa697d7a2a457349

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityCaddo Parish District Attorney's Office

Victim entityCaddo Parish District Attorney's Office

Incidentdiscovered Oct 25, 2021

Stated responseLaunched an investigation to determine the nature and scope of the incident

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov