Phish Leads to Breach at Calif. State Controller — Krebs on Security

For more than 24 hours starting on the afternoon of March 18, attackers had access to the email records of an employee in its Unclaimed Property Division after the employee got phished.