Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Total Financial Loss: The total financial loss from these incidents is estimated to be $0.

Detection and Response: The company detects and responds to cybersecurity incidents through an remediation measures with offered complimentary credit monitoring, and communication strategy with notified impacted individuals, and incident response plan activated with likely (investigation conducted), and recovery measures with settlement agreement (compensation + credit monitoring), and communication strategy with data breach notification letters (sent ~may 10, 2023)..

Common Attack Types: The most common types of attacks the company has faced is Breach.

Identification of Attack Vectors: The company identifies the attack vectors used in incidents through Email Accounts, Email Phishing and Phishing Email (compromised employee accounts).

Average Financial Loss: The average financial loss per incident is $0.00.

Commonly Compromised Data Types: The types of data most commonly compromised in incidents are Social Security Numbers, Driver'S License Or State-Issued Identification Numbers, Financial Account Numbers, Passport Numbers, Medical Information, Health Insurance Information, , Names, Social Security Numbers, Medical Information, , Personally Identifiable Information (Pii), Emails, Attachments and .

Incident Response Plan: The company's incident response plan is described as Likely (investigation conducted).

Prevention of Data Exfiltration: The company takes the following measures to prevent data exfiltration: Offered complimentary credit monitoring.

Data Recovery from Ransomware: The company recovers data encrypted by ransomware through Settlement agreement (compensation + credit monitoring).

Ensuring Regulatory Compliance: The company ensures compliance with regulatory requirements through Class action lawsuit (settled).

Additional Resources: Stakeholders can find additional resources on cybersecurity best practices at and Source: Contra Costa County, and Source: California Office of the Attorney GeneralDate Accessed: 2023-05-11, and Source: California Office of the Attorney General, and Source: Class Action Settlement Notice, and Source: Contra Costa County Official Statements (if any).

Communication of Investigation Status: The company communicates the status of incident investigations to stakeholders through Notified impacted individuals, Data breach notification letters (sent ~May 10 and 2023).

Advisories Provided: The company provides the following advisories to stakeholders and customers following an incident: were Settlement notices sent to affected individuals (May 2023) and Credit monitoring enrollment instructions provided.

Corrective Actions Taken: The company has taken the following corrective actions based on post-incident analysis: Settlement Agreement (Compensation), Likely: Enhanced Email Security Training, Mfa Implementation (Not Explicitly Stated), .

Last Attacking Group: The attacking group in the last incident were an Unauthorized Party and Unauthorized Parties (Unknown).

Most Recent Incident Detected: The most recent incident detected was on 2023-05-11.

Most Recent Incident Publicly Disclosed: The most recent incident publicly disclosed was on 2023-05-10.

Highest Financial Loss: The highest financial loss from an incident was {'settlement_fund': 'Undisclosed (covers claims up to $5,500 per person + credit monitoring)', 'attorneys_fees': '$150,000 (max)', 'class_representative_award': '$2,500 (max)', 'administration_costs': 'To be determined'}.

Most Significant Data Compromised: The most significant data compromised in an incident were Social Security numbers, Driver's license or state-issued identification numbers, Financial account numbers, Passport numbers, Medical information, Health insurance information, , Names, Social Security numbers, Medical information, , Emails, Attachments (likely containing PII) and .

Most Significant System Affected: The most significant system affected in an incident was 2 Employee Email Accounts.

Most Sensitive Data Compromised: The most sensitive data compromised in a breach were Social Security numbers, Financial account numbers, Attachments (likely containing PII), Driver's license or state-issued identification numbers, Health insurance information, Names, Medical information, Passport numbers and Emails.

Number of Records Exposed in Most Significant Breach: The number of records exposed in the most significant breach was 15.6K.

Most Significant Legal Action: The most significant legal action taken for a regulatory violation was Class action lawsuit (settled).

Most Recent Source: The most recent source of information about an incident are Contra Costa County Official Statements (if any), Class Action Settlement Notice, Contra Costa County and California Office of the Attorney General.

Current Status of Most Recent Investigation: The current status of the most recent investigation is Resolved (settlement reached).

Most Recent Stakeholder Advisory: The most recent stakeholder advisory issued was Settlement notices sent to affected individuals (May 2023), .

Most Recent Customer Advisory: The most recent customer advisory issued was an Credit monitoring enrollment instructions provided.

Most Recent Entry Point: The most recent entry point used by an initial access broker were an Email Phishing, Phishing Email (compromised employee accounts) and Email Accounts.

Most Significant Root Cause: The most significant root cause identified in post-incident analysis was Email Phishing, Phishing vulnerabilityInadequate email security controlsLack of multi-factor authentication (MFA).

Most Significant Corrective Action: The most significant corrective action taken based on post-incident analysis was Settlement agreement (compensation)Likely: Enhanced email security training, MFA implementation (not explicitly stated).