Central Valley Regional Center (CVRC) has become aware of a data security incident that has involved the personal and protected health information of some of the individuals it serves.
CVRC sent notification letters to the potentially impacted individuals to notify them of this incident and to provide resources to assist them in protecting their information.
This exposed information includes individuals' names, addresses and contact information, dates of birth, dates of death, Social Security numbers, driver's license information, state identification card or other government identification numbers.
CVRC learned that an unauthorized third party may have gained access to an employee's email account.
It disabled access to the account, immediately began an investigation, and engaged a computer forensics firm to determine the scope of the incident.
"id": "CEN03517423",
"linkid": "central-valley-regional-center",
"type": "Data Leak",
"date": "10/2019",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"