norm: department of toxic substances controlno LEI · no CIKMax severity: Medium

Canonical registry

Department of Toxic Substances Control

ent_4a41ecb3581242235dad88c5

Compliance scorecard →🔔 Follow entity

Disclosures

1

State AG · 1 jurisdiction

Incidents

—

no linked incident in sample

Max affected reported

—

no filed count in sample

Leak-site claims

0

none in sample

Identity resolution

Canonical name: Department of Toxic Substances Control
Normalized: department of toxic substances control— dedupe via name-norm; Microsoft / MSFT collapse to one row
GLEIF LEI: No match
SEC EDGAR CIK: None — not an SEC registrant
Domain: None on record

Disclosure history (1)newest first

🐻California State AGas victim2023-03-23
On March 10, 2023, the California Department of Toxic Substances Control (DTSC) discovered a compromised email account. An external threat actor briefly gained unauthorized access to the account. While no files were downloaded, the attacker may have viewed emails containing employees' names, Social Security Numbers, Driver's License Numbers, and medical information. DTSC immediately cut off access to the mailbox and limited inbox access to appropriate staff. The incident is contained.