Social EngineeringAgriculture & FoodAgriculturePhishingStolen CredentialsEmployee Data InvolvedMulti-Stage ChainIdentity (basic)Government IDFinancial accountHealth (basic)EmploymentHighContained

DRISCOLL'S, INC.

bd_fbfb3f21b11777b1 · schema v1 · pii pii-v1

Severity

High

Discovered

Jul 28, 2017

Filed

Feb 13, 2018

To disclose

29 weeks

Affected

1,384state residents only

Confidence

66%

Full breach record for DRISCOLL'S, INC. →

Driscoll's, Inc. experienced a data breach affecting 1,384 California residents (employees). On July 28, 2017, the company determined that employee payroll log-in credentials were compromised via a phishing email. Subsequent unauthorized access to employee email accounts occurred between July 17 and August 18, 2017. Affected data included names, Social Security numbers, and for some, driver's license numbers, passport numbers, financial account information, and medical/health insurance information. Driscoll's engaged forensic investigators, reset passwords, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jul 28, 2017 → Notified Feb 9, 2018196d ✗ CA 60-day late29 weeks discovery → filing

Incident timeline

undetected · 11 days

discovery → filing · 29 weeks / 200 days

Jul 17, 2017

Begins

Jul 28, 2017

Discovered

Feb 13, 2018

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,384 affectedView incident

Name: DRISCOLL'S, INC.
norm: driscoll s

Name: DRISCOLL'S, INC.
norm: driscoll s
Industry: Agriculture & Foodllm

Discovered: Jul 28, 2017
Breach occurred: Jul 17, 2017 – Aug 18, 2017
Undetected for: 11 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 9, 2018
Affected individuals: 1,384state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)Employment
Data elements: Social Security numberMedical information
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Providing written notice of this incident to other state regulators as necessary
Initial access: phishing_link

During the incident: Launched an investigation
Engaged a third-party forensic provider
Reset the passwords of all affected employees
Providing all potentially affected individuals access to one year of free credit and identity monitoring services with AllClear ID
Providing potentially impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to other state regulators as necessary
Changes made: Adding additional security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 weeks(200 days from discovery to filing)
Compliance flags: CA 60-day late · 196d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jul 28, 2017
→ Notified: Feb 9, 2018
196d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jul 28, 2017 → Notified: Feb 9, 2018	196d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-133736
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 13, 2018
Raw hash: 4c470e47119e883a5c3ed00dba7dc0eb07ba48f71baea5a35d89b1cc8531b6e7

Reporting entityDRISCOLL'S, INC.

Victim entityDRISCOLL'S, INC.

Incidentdiscovered Jul 28, 2017

Stated responseLaunched an investigation

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov