AccidentalFinancial ServicesFinanceMisconfigurationSupply Chain (3P Vendor)Customer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDHealth (basic)PHIMinorMediumResolved

CSAC-EXCESS INSURANCE AUTHORITY

bd_f923cf2bdda82af8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 9, 2015

Filed

Nov 10, 2015

To disclose

9 weeks

Affected

Not disclosed

Confidence

65%

Full breach record for CSAC-EXCESS INSURANCE AUTHORITY →

CSAC-Excess Insurance Authority notified the California AG of a breach involving its third-party vendor, Systema Software. A security researcher identified a configuration error in Systema's claims management website that allowed access to a temporary data backup. The researcher self-reported the issue to the Texas AG. Affected data included names, SSNs, driver's license numbers, and medical information. No unauthorized use was believed to have occurred.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 9 weeks / 62 days

Sep 3, 2015

Begins

Sep 9, 2015

Discovered

Nov 10, 2015

Filed

vs. sector median

+1 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: CSAC-EXCESS INSURANCE AUTHORITY
norm: csac excess insurance authority

Name: CSAC-EXCESS INSURANCE AUTHORITY
norm: csac excess insurance authority
Industry: Financial Servicesllm

Discovered: Sep 9, 2015
Breach occurred: Sep 3, 2015
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 10, 2015
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDHealth (basic)PHIMinor
Data elements: Social Security numberMedical information
Attack vector: Misconfiguration
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified California Attorney GeneralNotified Texas Attorney General
Third party: via Systema Software
Initial access: exploit_public_facing

During the incident: Systema Software immediately corrected the permissions for the application and eliminated the issue
CSAC-EIA immediately began an investigation of the report
Systema Software hired a computer security firm to ensure that the configuration issue was corrected and to determine the extent of the access
Notified the Texas Attorney General
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-58732
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 10, 2015
Raw hash: 5fa520e69615924e7c02bcefdcb6f3b024d0e442bf75ea9e1a818bec99302898

Reporting entityCSAC-EXCESS INSURANCE AUTHORITY

Victim entityCSAC-EXCESS INSURANCE AUTHORITY

Incidentdiscovered Sep 9, 2015

Stated responseSystema Software immediately corrected the permissions for the application and eliminated the issue

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov