HackingTargetedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained

Housing Authority of the County of Alameda (HACA)

bd_fe38247533a58dd2 · schema v1 · pii pii-v1

Full breach record for Housing Authority of the County of Alameda (HACA) →

Housing Authority of the County of Alameda (HACA) disclosed a data breach occurring September 2-3, 2018, discovered September 4, 2018. An unknown third party gained unauthorized access to a web service using multiple IP addresses, accessing Social Security numbers, names, addresses, dates of birth, and driver's license numbers. HACA reported the incident to the Hayward Police Department, shut down the compromised application, and initiated security reviews and staff re-education.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-142113
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2018
Raw hash: 8fa1c326c65bf9e78db2c603ceeca2fb3d9e3e87def4652fd3912cfc604e2b28

Reporting entity

Name: Housing Authority of the County of Alameda (HACA)
norm: housing authority of the county of alameda haca

Victim entity

Name: Housing Authority of the County of Alameda (HACA)
norm: housing authority of the county of alameda haca

Incident

Discovered: Sep 4, 2018
Materiality determined: Nov 23, 2018
Notification sent: —
Affected individuals: Not disclosed
Data types: IDENTITY_GOVERNMENTIDENTITY_BASIC
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: reported it to the Hayward Police Department
Initial access: exploit_public_facing

Compliance

Time to disclose: 12 weeks(83 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.