A sweeping data breach has reportedly exposed personal records and sensitive information belonging to thousands of people, including state employees and their contacts.
The incident was caused by an employee at the agency's Unclaimed Property Division clicking on a phishing email.
The unauthorized user had access to records in the state's Unclaimed Property Holder Reports.
The hacker also had access to the employee's Microsoft Office 365 files but the controller's office denied it.
"id": "CAL917622",
"linkid": "california-state-controllers-office",
"type": "Breach",
"date": "03/2021",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of a geographical region"