The California Office of the Attorney General disclosed a data breach at WideOrbit LLC, stemming from a phishing attack on July 1, 2020. Unauthorized access was gained to an employee’s email account, exposing personal information of current and former employees, contractors, and their dependents. The breach was reported over a year later, on July 30, 2021, though the exact number of affected individuals remains undisclosed. The compromised data likely included sensitive employee details, such as names, contact information, and potentially financial or tax-related records, given the nature of the attack. The delay in detection and reporting further exacerbated risks, leaving affected parties vulnerable to identity theft, fraud, or other malicious activities. The incident underscores the persistent threat of phishing as a gateway for broader data compromise, particularly when employee credentials are targeted.