Hamilton Zanze & Company

On June 29, 2017, Hamilton Zanze & Company experienced a data breach when a password-protected laptop belonging to an employee was stolen during a burglary. The incident was reported to the California Office of the Attorney General on July 27, 2017. The compromised device contained sensitive personal information, including full names, dates of birth, telephone numbers, addresses, and Social Security numbers of individuals associated with the company. While the laptop was password-protected, there was no confirmation that the stolen data was accessed or misused by unauthorized parties. The breach posed a risk of identity theft or fraud due to the exposure of personally identifiable information (PII), though no direct financial or operational harm was immediately reported. The company likely initiated internal investigations and notified affected individuals as part of compliance with data protection regulations.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-100609

TPRM report: https://www.rankiteo.com/company/hamilton-zanze

"id": "ham953091725",
"linkid": "hamilton-zanze",
"type": "Breach",
"date": "6/2017",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Real Estate / Property Management',
                        'location': 'California, USA',
                        'name': 'Hamilton Zanze & Company',
                        'type': 'Company'}],
 'attack_vector': 'Physical Theft (Burglary)',
 'data_breach': {'data_encryption': 'Device was password-protected',
                 'data_exfiltration': 'No evidence of unauthorized access',
                 'personally_identifiable_information': ['Full names',
                                                         'Dates of birth',
                                                         'Telephone numbers',
                                                         'Addresses',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2017-06-29',
 'date_publicly_disclosed': '2017-07-27',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving Hamilton Zanze & Company on July 27, 2017. '
                "The breach occurred on June 29, 2017, when an employee's "
                'password-protected laptop was stolen during a burglary. The '
                'information potentially compromised may have included full '
                'names, dates of birth, telephone numbers, addresses, and/or '
                'Social Security numbers, but there is no evidence that any '
                'information was accessed by unauthorized individuals.',
 'impact': {'data_compromised': ['Full names',
                                 'Dates of birth',
                                 'Telephone numbers',
                                 'Addresses',
                                 'Social Security numbers'],
            'identity_theft_risk': 'Potential (no evidence of unauthorized '
                                   'access)',
            'systems_affected': ['Employee laptop']},
 'investigation_status': 'No evidence of unauthorized data access; '
                         'investigation likely closed',
 'post_incident_analysis': {'root_causes': ['Physical security failure (laptop '
                                            'theft)',
                                            'Inadequate device encryption '
                                            '(password-only protection)']},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'response': {'communication_strategy': 'Public disclosure via California '
                                        'Office of the Attorney General'},
 'title': 'Hamilton Zanze & Company Laptop Theft Data Breach (2017)',
 'type': 'Data Breach (Physical Theft)',
 'vulnerability_exploited': 'Unsecured Physical Device (Password-protected '
                            'laptop)'}