Contra Costa County

An unauthorized party accessed certain employee email accounts of Contra Costa County in a computer breach.

The emails had the attachments containing information including Social Security numbers; driver's license or state-issued identification numbers; financial account numbers; passport numbers; and medical information and/or health insurance information of certain county employees, as well as individuals who communicated with the county's Employment and Human Services Department.

The County officials investigated the incident and notified the impacted individuals and offered them complimentary credit monitoring.

Source: https://www.cbsnews.com/sanfrancisco/news/contra-costa-county-employee-email-accounts-hacked-in-data-breech/

TPRM report: https://scoringcyber.rankiteo.com/company/contra-costa-county

"id": "con223718522",
"linkid": "contra-costa-county",
"type": "Breach",
"date": "08/2021",
"severity": "80",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Public Administration',
                        'location': 'Contra Costa County, California',
                        'name': 'Contra Costa County',
                        'type': 'Government'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers',
                                              "Driver's license or "
                                              'state-issued identification '
                                              'numbers',
                                              'Financial account numbers',
                                              'Passport numbers',
                                              'Medical information',
                                              'Health insurance information']},
 'description': 'An unauthorized party accessed certain employee email '
                'accounts of Contra Costa County in a computer breach. The '
                'emails had attachments containing sensitive information of '
                'county employees and individuals who communicated with the '
                'Employment and Human Services Department.',
 'impact': {'data_compromised': ['Social Security numbers',
                                 "Driver's license or state-issued "
                                 'identification numbers',
                                 'Financial account numbers',
                                 'Passport numbers',
                                 'Medical information',
                                 'Health insurance information'],
            'systems_affected': 'Email Accounts'},
 'initial_access_broker': {'entry_point': 'Email Accounts'},
 'references': [{'source': 'Contra Costa County'}],
 'response': {'communication_strategy': 'Notified impacted individuals',
              'remediation_measures': 'Offered complimentary credit '
                                      'monitoring'},
 'threat_actor': 'Unauthorized Party',
 'title': 'Contra Costa County Email Breach',
 'type': 'Data Breach'}