The California Office of the Attorney General reported a data breach involving flexPATH Strategies, LLC on March 15, 2019. The breach occurred on December 7, 2018, when an unauthorized person gained access to an employee email account. Although it was determined that some personal information was present in the account, it is unknown whether the information was viewed or acquired by the unauthorized individual.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-145490
TPRM report: https://www.rankiteo.com/company/flexpath
"id": "fle458072825",
"linkid": "flexpath",
"type": "Breach",
"date": "12/2018",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'name': 'flexPATH Strategies, LLC', 'type': 'Company'}],
'attack_vector': 'Email Account Compromise',
'data_breach': {'type_of_data_compromised': 'Personal Information'},
'date_detected': '2019-03-15',
'date_publicly_disclosed': '2019-03-15',
'description': 'The California Office of the Attorney General reported a data '
'breach involving flexPATH Strategies, LLC on March 15, 2019. '
'The breach occurred on December 7, 2018, when an unauthorized '
'person gained access to an employee email account. Although '
'it was determined that some personal information was present '
'in the account, it is unknown whether the information was '
'viewed or acquired by the unauthorized individual.',
'impact': {'data_compromised': 'Personal Information',
'systems_affected': 'Email Account'},
'initial_access_broker': {'entry_point': 'Email Account'},
'motivation': 'Unknown',
'references': [{'date_accessed': '2019-03-15',
'source': 'California Office of the Attorney General'}],
'threat_actor': 'Unknown',
'title': 'Data Breach at flexPATH Strategies, LLC',
'type': 'Data Breach',
'vulnerability_exploited': 'Unauthorized Access to Email Account'}