Data Breach at California State Controller's Office

California State Controller's Office website ^ | March 20, 2021 | CA State Controller

[MercyFlush]

March 20, 2021

NOTICE OF DATA BREACH

WHAT HAPPENED? An employee of the California State Controller’s Office (SCO) Unclaimed Property Division clicked on a link in an email they received and then entered their user ID and password as prompted, unknowingly providing an unauthorized user with access to their email account. The unauthorized user had access to the account from March 18, 2021 at 1:42 p.m. to March 19, 2021 at 3:19 p.m..

WHAT INFORMATION WAS INVOLVED? SCO has reason to believe the compromised email account had personal identifying information contained in Unclaimed Property Holder Reports. The unauthorized user also sent potentially malicious emails to some of the SCO employee’s contacts.

WHAT WE ARE DOING The improperly accessed email account was discovered promptly, and access removed. SCO Unclaimed Property Division personnel immediately began a review of all emails in the account for personal identifying information that may have been viewed. A notice was emailed to all contacts who were sent an email from the unauthorized user, advising them to delete the email and not click on any links therein.

WHAT YOU CAN DO Given the nature of the information potentially exposed, we strongly recommend that individuals and companies contacted by SCO about the breach monitor their accounts. Further, we strongly recommend they contact the three credit bureaus and place a fraud alert on their accounts. Their contact information is below.

Equifax (800) 685-1111 Equifax.com/personal/credit-report-services P.O. Box 740256 Atlanta, GA 30374-0256

Experian (888) EXPERIAN [(888) 397-3742] Experian.com/help P.O. Box 4500 Allen, TX 75013

TransUnion (888) 909-8872 TransUnion.com/credit-help P.O. Box 2000 Chester, PA 19016

FOR MORE INFORMATION call (916) 322-3160, or email UCPReporting@sco.ca.gov

Updated: 03-22-2021

[MercyFlush]

I'm told the hackers had access to the network for more than 24 hours. If true then this could end up being very, very big news!

If you do business with the State of California then the Controller's Office has your SSN, name, tax ID, address, and banking information if you do direct deposit with them.

Time to check your bank accounts!!!

[Pollard]

An employee of the California State Controller’s Office (SCO) Unclaimed Property Division clicked on a link in an email they received and then entered their user ID and password as prompted, unknowingly providing an unauthorized user with access to their email account.

Oopsie

[Vendome]

The check bounced and they got their money with interest