MalwareEnergy & UtilitiesUtilitiesRansomwareData EncryptedCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

Camrosa Water District

bd_ff6b2240ef33f212 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 13, 2020

Filed

Nov 6, 2020

To disclose

12 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

65%

Full breach record for Camrosa Water District →

Camrosa Water District experienced a ransomware attack discovered on August 13, 2020. Unauthorized access to file servers occurred between August 20, 2019, and August 13, 2020. The incident involved the encryption of data and potential exposure of names, Social Security numbers, and bank account details for employees and customers. The organization engaged a cybersecurity firm, restored operations, and implemented additional security measures including MFA and endpoint detection. Credit monitoring was offered to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 13, 2020 → Notified Sep 28, 202046d ✓ CA 60-day OK12 weeks discovery → filing

Incident timeline

undetected · 359 days

discovery → filing · 12 weeks / 85 days

Aug 20, 2019

Begins

Aug 13, 2020

Discovered

Nov 6, 2020

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_75d78584c29eaa802020-11-06Candidate
Massachusetts State AGbd_919af406de787b162020-11-06Verified

Name: Camrosa Water District
norm: camrosa water district

Name: Camrosa Water District
norm: camrosa water district
Industry: Energy & Utilitiesllm

Discovered: Aug 13, 2020
Breach occurred: Aug 20, 2019 – Aug 13, 2020
Undetected for: 359 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 28, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External

During the incident: Immediately began to investigate
Engaged a cybersecurity firm to assist
Took measures to address the incident and restore operations
Changes made: Deployed an endpoint threat detection and response tool
Implemented multi-factor authentication for employee access into the Camrosa network
Implemented firewall Intrusion Prevention and Intrusion Detection Systems (IPS and IDS)
Offering a complimentary one-year membership with Experian’s IdentityWorks
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: CA 60-day OK · 46d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 13, 2020
→ Notified: Sep 28, 2020
46d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 13, 2020 → Notified: Sep 28, 2020	46d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGNov 6 · first

Massachusetts State AGNov 6 · first

California State AGNov 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-195916
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 6, 2020
Raw hash: 965ac9b05d2f5b5b40ab82f5bcd3eeb25ea2f6af5e5142a65773fccb8694dd7a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCamrosa Water District

Victim entityCamrosa Water District

Incidentdiscovered Aug 13, 2020

Stated responseImmediately began to investigate

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov