UnknownProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Fong, Ko & Associates LLP

bd_020816aae7a5040b · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 4, 2025

Filed

Jun 1, 2026

To disclose

52 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

63%

Fong, Ko & Associates LLP notified the California Attorney General of an incident where suspicious activity was detected on June 4, 2025. Investigation determined that files were accessed between June 2 and June 4, 2025. Affected data includes names and Social Security or tax identification numbers. The firm engaged third-party forensic specialists, secured systems, and is offering credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 4, 2025 → Notified Jun 1, 2026362d ✗ CA 60-day late52 weeks discovery → filing

Incident timeline

undetected · 2 days

discovery → filing · 52 weeks / 362 days

Jun 2, 2025

Begins

Jun 4, 2025

Discovered

Jun 1, 2026

Filed

vs. sector median

+33 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_925a12a43b17a6002026-06-01Candidate
Indiana State AGbd_b701bb6a124ce3db2026-06-01Verified
New Hampshire State AGbd_cc63128c9311ccd02026-06-01Verified

Name: Fong, Ko & Associates LLP
norm: fong ko associates

Name: Fong, Ko & Associates LLP
norm: fong ko associates
Industry: Professional Servicesllm

Discovered: Jun 4, 2025
Breach occurred: Jun 2, 2025 – Jun 4, 2025
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 1, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unknown
Regulator citations: Notified California Attorney General

During the incident: Launched an investigation with the assistance of third-party computer forensic specialists
Confirmed the security of our systems
Reviewed the contents of relevant data for sensitive information
Notifying potentially impacted individuals
Reviewing our policies, procedures and processes related to the storage and access of personal information
Notifying applicable regulatory authorities where necessary
Offering complimentary access to credit monitoring services through Experian
Changes made: Continuing to review our policies, procedures and processes related to the storage and access of personal information to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 52 weeks(362 days from discovery to filing)
Compliance flags: CA 60-day late · 362d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 4, 2025
→ Notified: Jun 1, 2026
362d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 4, 2025 → Notified: Jun 1, 2026	362d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGJun 1 · first

Indiana State AGJun 1 · first

New Hampshire State AGJun 1 · first

California State AGJun 1 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-624228
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 1, 2026
Raw hash: 0aca966fa63271904442923ab850124734161b3e808f0622c99e11a645258988

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityFong, Ko & Associates LLP

Victim entityFong, Ko & Associates LLP

Incidentdiscovered Jun 4, 2025

Stated responseLaunched an investigation with the assistance of third-party computer forensic specialists

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov