HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Young’s Commercial Transfer
bd_1163473de1cfe473 · schema v1 · pii pii-v1
Full breach record for Young’s Commercial Transfer →Young’s Commercial Transfer notified the California Attorney General of an incident where an unknown individual accessed certain systems between January 20 and 21, 2023. The company identified suspicious activity on January 21, 2023. The investigation determined that names and other information were present in impacted files. The company engaged outside cybersecurity specialists, reported to federal law enforcement, and is offering 12 months of credit monitoring.
California clockDiscovered Jan 21, 2023 → Notified May 17, 2023116d ✗ CA 60-day late17 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-566841
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 17, 2023
- Raw hash
- 215c6d01518647765dcf07df4db3383d6779edb8e9ee9d9336060ab6709a7caa
Reporting entity
- Name
- Young’s Commercial Transfernorm: young s commercial transfer
Victim entity
- Name
- Young’s Commercial Transfernorm: young s commercial transfer
Incident
- Discovered
- Jan 21, 2023
- Materiality determined
- —
- Notification sent
- May 17, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the event to federal law enforcement
Compliance
- Time to disclose
- 17 weeks(116 days from discovery to filing)
- Compliance flags
- CA 60-day late · 116d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 21, 2023→ Notified: May 17, 2023116d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.