AccidentalProfessional ServicesProfessional ServicesMisconfigurationCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

211 LA County

bd_f7b6c87dd114876f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 14, 2018

Filed

Jul 5, 2018

To disclose

16 weeks

Affected

8state residents only

Confidence

64%

Full breach record for 211 LA County →

211 LA County notified individuals of a data breach caused by an employee misconfiguring a database during an upgrade, exposing it to the internet. Unauthorized access occurred between March 14 and April 23, 2018. Affected data included names and Social Security numbers. The company engaged forensic investigators, secured the database, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 113 days

Mar 14, 2018

Begins

Mar 14, 2018

Discovered

Jul 5, 2018

Filed

vs. sector median

2 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed8 affectedView incident

Name: 211 LA County
norm: 211 la county

Name: 211 LA County
norm: 211 la county
Industry: Professional Servicesllm

Discovered: Mar 14, 2018
Breach occurred: Mar 14, 2018 – Apr 23, 2018
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 3, 2018
Affected individuals: 8state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Initial access: insider_action

During the incident: Reconfigured and restricted external access to the information
Hired a leading computer security firm to help determine how this happened and the extent of the incident
Reconfigured processes and procedures so that this information is no longer accessible from the internet
Added additional security to our internet-based storage platforms
Providing additional and ongoing staff data security training
Reviewing existing security and privacy policies
Enhanced the security protections we already have in place
Offering you a complimentary one-year membership to Experian’s® IdentityWorksSM Credit 3B
Changes made: Reconfigured processes and procedures so that this information is no longer accessible from the internet
Added additional security to our internet-based storage platforms
Providing additional and ongoing staff data security training
Reviewing existing security and privacy policies
Enhanced the security protections we already have in place
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(113 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/211-LA-County.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 5, 2018
Raw hash: 9abc48f03480d216be04b0bfcd43b8cd45fc63869156032125c47e5118a6131b

Reporting entity211 LA County

Victim entity211 LA County

Incidentdiscovered Mar 14, 2018

Stated responseReconfigured and restricted external access to the information

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov