San Francisco Symphony

The California Office of the Attorney General reported a data breach involving the San Francisco Symphony on November 17, 2021. The breach involved unauthorized access to one company email account between September 7, 2021, and September 22, 2021, potentially affecting personal information including names, addresses, social security numbers, dates of birth, and email account information.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-547681

TPRM report: https://www.rankiteo.com/company/san-francisco-symphony

"id": "san925072925",
"linkid": "san-francisco-symphony",
"type": "Breach",
"date": "9/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Arts and Entertainment',
                        'location': 'San Francisco, CA',
                        'name': 'San Francisco Symphony',
                        'type': 'Organization'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'addresses',
                                              'social security numbers',
                                              'dates of birth',
                                              'email account information']},
 'date_detected': '2021-09-22',
 'date_publicly_disclosed': '2021-11-17',
 'description': 'Unauthorized access to one company email account potentially '
                'affecting personal information including names, addresses, '
                'social security numbers, dates of birth, and email account '
                'information.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'social security numbers',
                                 'dates of birth',
                                 'email account information']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'date_accessed': '2021-11-17',
                 'source': 'California Office of the Attorney General'}],
 'title': 'San Francisco Symphony Data Breach',
 'type': 'Data Breach'}