HackingData ExfiltratedCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
Apro, LLC
bd_0e57a2be488ad69d · schema v1 · pii pii-v1
Full breach record for Apro, LLC →Apro, LLC d/b/a United Pacific experienced unauthorized access to its systems between February 20 and March 2, 2025. The company discovered the incident on March 22, 2025. An unauthorized third-party obtained files containing personal information including names, addresses, Social Security numbers, income, tax withholdings, and dates of birth. Apro engaged cybersecurity firms, notified law enforcement, and implemented remediation measures including credential rotation and enhanced MFA. Affected individuals are offered 12 months of Experian IdentityWorks.
California clockDiscovered Mar 22, 2025 → Notified May 23, 202562d ✗ CA 60-day late9 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-603159
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 23, 2025
- Raw hash
- cb2b25877431e65a0d35f26674e6668438c308f350c409e42a28ea439f2bfb93
Reporting entity
- Name
- Apro, LLCnorm: apro
Victim entity
- Name
- Apro, LLCnorm: apro
Incident
- Discovered
- Mar 22, 2025
- Materiality determined
- —
- Notification sent
- May 23, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 9 weeks(62 days from discovery to filing)
- Compliance flags
- CA 60-day late · 62d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 22, 2025→ Notified: May 23, 202562d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.