HackingOtherStolen CredentialsCustomer Data InvolvedIdentity (basic)Financial accountLowContained

The Grand Lodge of Free & Accepted Masons of California

bd_f6a89cd286e31628 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 14, 2022

Filed

Aug 19, 2022

To disclose

9 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for The Grand Lodge of Free & Accepted Masons of California →

The Grand Lodge of Free & Accepted Masons of California experienced unauthorized access to an employee email account between June 10 and June 14, 2022. The incident potentially exposed names, signatures, and financial account information from donation checks sent between March 2020 and June 2022. The organization reset credentials, engaged forensic investigators, and offered 12 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 4 days

discovery → filing · 9 weeks / 66 days

Jun 10, 2022

Begins

Jun 14, 2022

Discovered

Aug 19, 2022

Filed

vs. sector median

+1 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Montana State AGbd_33978a6670ab5b5d2022-08-19Candidate
Maine State AGbd_559b05b09bfd3c2f2022-08-19Verified
Massachusetts State AGbd_647c45f20683f3532022-08-19Verified
Indiana State AGbd_f6b91bd78419ef362022-08-19Verified

Name: The Grand Lodge of Free & Accepted Masons of California
norm: the grand lodge of free accepted masons of california

Name: The Grand Lodge of Free & Accepted Masons of California
norm: the grand lodge of free accepted masons of california
Industry: Otherllm

Discovered: Jun 14, 2022
Breach occurred: Jun 10, 2022 – Jun 14, 2022
Undetected for: 4 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 19, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Performed a password reset for the affected account
Engaged a third-party team of forensic investigators
Reviewed the account to determine if any personal information was present
Took steps to secure their systems
Enhancing the security of their network
Revised its policies for storage of donation checks
Arranged for complimentary credit monitoring service for 12 months
Changes made: Enhancing the security of their network
Revised its policies for storage of donation checks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(66 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGAug 19 · first

Maine State AGAug 19 · first

Massachusetts State AGAug 19 · first

Indiana State AGAug 19 · first

California State AGAug 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-556409
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 19, 2022
Raw hash: 1e7f49d9f8ef9dd4545110d537e73b93cdce8a80bbd33bb6c926670182b57f3e

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityThe Grand Lodge of Free & Accepted Masons of California

Victim entityThe Grand Lodge of Free & Accepted Masons of California

Incidentdiscovered Jun 14, 2022

Stated responsePerformed a password reset for the affected account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov