[No Name Available]
Attribution profile
- Type
- Criminal
- Location
- United States of America
- Known incidents
- 1 incident
- Sources
- 0 sources
- First seen
- 2020-02-24
- Last seen
- 2020-02-24
- Updated
- 2026-10-12 12:27
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
The threat actor, based in the United States and without any publicly known aliases, gained unauthorized access to a vendor‑hosted test database used by the San Francisco Employees Retirement System on 2020‑02‑24. The breach exposed members’ names, addresses, dates of birth, beneficiary details, IRS Form 1099R data containing routing numbers, and login credentials with security answers for registered users, though Social Security numbers and full bank account information were not compromised. The intrusion was limited to the test environment and resulted in the organization offering credit monitoring services to affected individuals. No malware families, specific tools, affiliations, or broader campaign patterns have been publicly attributed to this actor.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 0 sources.