Department of Toxic Substances Control

On March 10, 2023, the California Department of Toxic Substances Control (DTSC) discovered a compromised email account. An external threat actor briefly gained unauthorized access to the account. While no files were downloaded, the attacker may have viewed emails containing employees' names, Social Security Numbers, Driver's License Numbers, and medical information. DTSC immediately cut off access to the mailbox and limited inbox access to appropriate staff. The incident is contained.