City of Thousand Oaks

The City of Thousand Oaks experienced a data breach reported by the California Office of the Attorney General on June 4, 2018, though the incident itself occurred earlier on November 21, 2017. An unauthorized individual potentially gained access to payment card information of customers processed through one of the City’s third-party vendors. The exact number of affected individuals remains undisclosed, raising concerns about the scope of exposure. The breach involved financial data, which, if exploited, could lead to fraudulent transactions, identity theft, or reputational harm for both the City and its residents. While no immediate evidence suggested large-scale misuse, the lack of clarity on the extent of the compromise left customers vulnerable. The incident underscored risks associated with third-party vendor security gaps, highlighting the need for stricter oversight in handling sensitive payment data. No ransomware or broader systemic disruption was reported, but the exposure of financial details classified the breach as a significant customer data leak under the given framework.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-136764

TPRM report: https://www.rankiteo.com/company/city-of-thousand-oaks

"id": "cit025091825",
"linkid": "city-of-thousand-oaks",
"type": "Breach",
"date": "11/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Public Administration',
                        'location': 'Thousand Oaks, California, USA',
                        'name': 'City of Thousand Oaks',
                        'type': 'Government (Local)'}],
 'data_breach': {'data_exfiltration': 'Possible (unauthorized access)',
                 'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': 'Potential (linked to '
                                                        'payment cards)',
                 'sensitivity_of_data': 'High (financial data)',
                 'type_of_data_compromised': ['Payment card information']},
 'date_publicly_disclosed': '2018-06-04',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving the City of Thousand Oaks on June 4, 2018. '
                'The breach occurred on November 21, 2017, when an '
                'unauthorized individual may have gained access to the payment '
                'card information of customers processed through the City’s '
                'vendor. Specific numbers of individuals affected are unknown.',
 'impact': {'data_compromised': ['Payment card information'],
            'identity_theft_risk': 'Potential (payment card information '
                                   'exposed)',
            'payment_information_risk': 'High (payment card information '
                                        'exposed)'},
 'initial_access_broker': {'high_value_targets': ['Payment card data']},
 'references': [{'date_accessed': '2018-06-04',
                 'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to California '
                                                       'Office of the Attorney '
                                                       'General'},
 'response': {'communication_strategy': 'Public disclosure via California '
                                        'Office of the Attorney General'},
 'threat_actor': 'Unauthorized individual',
 'title': 'Data Breach at the City of Thousand Oaks (2017)',
 'type': 'Data Breach'}