Silicon Valley Community Foundation

The Silicon Valley Community Foundation (SVCF) suffered a data breach on August 23, 2018, where unauthorized actors gained access to three email accounts containing personally identifiable information (PII). The exposed data included sensitive details such as names, addresses, and identification numbers of affected individuals. The breach was not immediately detected and was only publicly disclosed on April 20, 2020, nearly two years later. The delayed reporting raised concerns about the foundation’s cybersecurity protocols and the potential misuse of the compromised data. While the exact number of impacted individuals was not specified, the exposure of PII posed risks of identity theft, phishing attacks, and financial fraud. The incident highlighted vulnerabilities in SVCF’s email security measures, emphasizing the need for stronger access controls and real-time breach detection systems to prevent similar occurrences in the future.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-189302

TPRM report: https://www.rankiteo.com/company/silicon-valley-community-foundation

"id": "sil717082025",
"linkid": "silicon-valley-community-foundation",
"type": "Breach",
"date": "8/2018",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Philanthropy',
                        'location': 'California, USA',
                        'name': 'Silicon Valley Community Foundation',
                        'type': 'Non-profit Organization'}],
 'data_breach': {'data_exfiltration': 'Potential',
                 'personally_identifiable_information': ['names',
                                                         'addresses',
                                                         'identification '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2018-08-23',
 'date_publicly_disclosed': '2020-04-20',
 'description': 'The California Office of the Attorney General reported that '
                'Silicon Valley Community Foundation experienced a data breach '
                'on August 23, 2018, involving unauthorized access to three '
                'email accounts containing personally identifiable information '
                '(PII). The breach potentially exposed personal information '
                'such as names, addresses, and identification numbers of '
                'affected individuals.',
 'impact': {'data_compromised': ['names',
                                 'addresses',
                                 'identification numbers'],
            'identity_theft_risk': 'Potential',
            'systems_affected': ['email accounts']},
 'references': [{'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'title': 'Silicon Valley Community Foundation Data Breach (2018)',
 'type': 'Data Breach'}