The California Office of the Attorney General reported a data breach at the Bay Area Air Quality Management District on January 10, 2018. Unauthorized access to email accounts potentially exposed the Social Security Numbers of current and former employees, as well as members of its Board of Directors, Hearing Board, and Advisory Council. Three other accounts were accessed briefly. The breach was reported on May 25, 2018, and involved fraudulent access attempts without detected misuse of personal information.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-136551
TPRM report: https://www.rankiteo.com/company/bay-area-air-district
"id": "bay127072925",
"linkid": "bay-area-air-district",
"type": "Breach",
"date": "1/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Environmental Management',
'location': 'California, USA',
'name': 'Bay Area Air Quality Management District',
'type': 'Government Agency'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security Numbers']},
'date_detected': '2018-01-10',
'date_publicly_disclosed': '2018-05-25',
'description': 'Unauthorized access to email accounts potentially exposed '
'Social Security Numbers of current and former employees and '
'several members of its Board of Directors, Hearing Board, and '
'Advisory Council.',
'impact': {'data_compromised': ['Social Security Numbers'],
'systems_affected': ['Email Accounts']},
'initial_access_broker': {'entry_point': 'Email Accounts',
'high_value_targets': ['Board of Directors',
'Hearing Board',
'Advisory Council']},
'references': [{'date_accessed': '2018-05-25',
'source': 'California Office of the Attorney General'}],
'title': 'Bay Area Air Quality Management District Data Breach',
'type': 'Data Breach'}