Summary
- Environment: Employee reporting file sent to California EDD
- Operational impact: Current and former employee names and Social Security numbers disclosed
- Financial impact: No incident cost publicly quantified
- Record status: Developing record. Reviewed November 5, 2026; updated as evidence emerges.
What happened
Center Theatre Group inadvertently sent California’s Employment Development Department a file containing current and former employees’ personal information while reporting new hires on July 27, 2026. [1]
Impact
The file included names and Social Security numbers, but not bank-account information. [1]
Timeline
Employee file inadvertently uploaded
Employee file inadvertently uploaded, as described in the incident notice.
[1]Notification letter dated
Notification letter dated, as described in the incident notice.
[1]Briefing updated
This briefing was last reviewed and updated on November 5, 2026.
Threat Group & Attack Vector
The notice describes an accidental upload, without identifying an external attacker or compromised system. [1]
Actors
- The notice describes an accidental upload; no threat actor is identified.
TTPs
- No specific MITRE ATT&CK technique is currently mapped for this case.
Response
Center Theatre Group said EDD confirmed deletion from its databases. It reviewed reporting procedures and offered 12 months of credit monitoring and identity support. [1]