City of Bakersfield

The California Office of the Attorney General reported a data breach involving the City of Bakersfield on October 4, 2019. The breach occurred between July 30, 2019, and September 5, 2019, due to unauthorized code inserted into the online payment system, Click2Gov, affecting payment card information such as card number, expiration date, and CVV.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-183190

TPRM report: https://www.rankiteo.com/company/city-of-bakersfield

"id": "cit426072925",
"linkid": "city-of-bakersfield",
"type": "Cyber Attack",
"date": "7/2019",
"severity": "60",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Public Administration',
                        'location': 'Bakersfield, California',
                        'name': 'City of Bakersfield',
                        'type': 'Government'}],
 'attack_vector': 'Unauthorized code insertion',
 'data_breach': {'data_exfiltration': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['card number',
                                              'expiration date',
                                              'CVV']},
 'date_detected': '2019-10-04',
 'date_publicly_disclosed': '2019-10-04',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving the City of Bakersfield on October 4, 2019. '
                'The breach occurred between July 30, 2019, and September 5, '
                '2019, due to unauthorized code inserted into the online '
                'payment system, Click2Gov, affecting payment card information '
                'such as card number, expiration date, and CVV.',
 'impact': {'data_compromised': ['card number', 'expiration date', 'CVV'],
            'payment_information_risk': True,
            'systems_affected': ['Click2Gov online payment system']},
 'initial_access_broker': {'entry_point': 'Online payment system'},
 'post_incident_analysis': {'root_causes': 'Unauthorized code insertion into '
                                           'the online payment system'},
 'references': [{'date_accessed': '2019-10-04',
                 'source': 'California Office of the Attorney General'}],
 'title': 'City of Bakersfield Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Online payment system vulnerability'}