🐻California State AGFirst filing
Filed Mar 12, 2020bd_e6420aa8a2894ae5
New Heights Ventures Inc. reported a phishing incident on March 11, 2020, where an attacker used a spearphishing link to compromise a management email account. The attacker accessed the contact list and tricked employees into revealing credentials, gaining access to a cloud-based server containing employee PII, including SSNs and medical leave data. The company contained the breach, implemented 2FA, and notified affected individuals and government agencies.