CHP 11-99 Foundation: staff email account compromised by phishing (disclosed 2026)

CHP 11-99 Foundation: staff email account compromised by phishing

Around September 16, 2025, a staff member forwarded a suspicious email to the external provider’s help desk, was told the link was clean, and opened it, leading to compromise; the attacker had full access to the email account, including all folders and attached documents.

Dernière mise à jour: 2026-11-09

Présentation

Detected around September 24, 2025 when the attacker used the account to phish the help desk. Fields are templated; no total is given. The first-disclosure date is the earliest public document confirmed (California AG posting); no 2025 public disclosure was found in other state AG lists, HHS or company notices checked.

Chronologie

2025-09-16Survenue
2025-09-24Découverte
2026-01-23Divulgation

Réponse de l’organisation

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

Que faire ?

Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.

Sources

Sample consumer notice filed with California AG (CHP 11-99 Foundation)California Department of Justice, Office of the Attorney General · 2026-11-09
Sample consumer notice filed with California AG (CHP 11-99 Foundation, posted 01/23/2026) [2]California Department of Justice, Office of the Attorney General · 2026-11-09
Sample consumer notice filed with California AG (CHP 11-99 Foundation, posted 01/23/2026)California Department of Justice, Office of the Attorney General · 2026-11-09
California AG data breach report: CHP 11-99 FoundationCalifornia Department of Justice, Office of the Attorney General · 2026-11-09
California AG data breach report: CHP 11-99 Foundation (posted 01/23/2026)California Department of Justice, Office of the Attorney General · 2026-11-09

Écrire un commentaire