City of Maywood

The City of Maywood experienced a data breach reported by the California Office of the Attorney General on August 11, 2022, though the incident was initially detected on March 6, 2022. The breach stemmed from unusual activity in an employee’s email account, raising concerns that personal information may have been compromised. While the exact nature of the exposed data remains undisclosed, the breach suggests potential unauthorized access to sensitive details linked to the employee’s account. The number of affected individuals is unknown, leaving the full scope of the exposure unclear. The incident highlights vulnerabilities in the city’s email security protocols, as malicious actors likely exploited weak access controls or phishing tactics to infiltrate the system. Given the involvement of an employee’s account, the breach could have led to the exposure of internal communications, personally identifiable information (PII), or other confidential records tied to municipal operations. The delayed public disclosure—nearly five months after detection—further underscores gaps in incident response transparency, potentially exacerbating risks for impacted parties.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-556174

TPRM report: https://www.rankiteo.com/company/village-of-maywood

"id": "vil330091725",
"linkid": "village-of-maywood",
"type": "Breach",
"date": "1/2022",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Public Administration',
                        'location': 'Maywood, California, USA',
                        'name': 'City of Maywood',
                        'type': 'Government (Local)'}],
 'data_breach': {'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': True,
                 'type_of_data_compromised': 'Personal Information'},
 'date_detected': '2022-03-06',
 'date_publicly_disclosed': '2022-08-11',
 'description': 'The California Office of the Attorney General reported a data '
                'breach involving the City of Maywood on August 11, 2022. The '
                'breach was discovered on March 6, 2022, after unusual '
                "activity was noted regarding an employee's email account, "
                'which may have affected personal information, although the '
                'number of individuals impacted is unknown.',
 'impact': {'data_compromised': 'Personal Information (unknown quantity)',
            'identity_theft_risk': 'Potential (unknown scale)',
            'systems_affected': ['Employee Email Account']},
 'references': [{'date_accessed': '2022-08-11',
                 'source': 'California Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['California Office of '
                                                        'the Attorney '
                                                        'General']},
 'title': 'Data Breach at the City of Maywood',
 'type': 'Data Breach'}