UnknownProfessional ServicesProfessional ServicesCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountHealth (basic)PHIMediumContained

Fesmire & Williams

bd_16dd38eac29ab6a2 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 17, 2021

Filed

Sep 27, 2022

To disclose

45 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

65%

Full breach record for Fesmire & Williams →

Fesmire & Williams detected suspicious network activity on November 17, 2021. An investigation concluded in September 2022 that an unknown party accessed personal information including names, SSNs, dates of birth, driver's license numbers, financial account numbers, medical history, and health insurance information. The firm engaged forensic specialists and is offering credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 17, 2021 → Notified Sep 27, 2022314d ✗ CA 60-day late45 weeks discovery → filing

Incident timeline

discovery → filing · 45 weeks / 314 days

Nov 17, 2021

Begins

Nov 17, 2021

Discovered

Sep 27, 2022

Filed

vs. sector median

+26 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_342fe5a7be9f6a2f2022-09-27Verified
Indiana State AGbd_4bdd0d97890af1bd2022-09-27Verified
Maine State AGbd_cffc2631ed10c8562022-09-27Verified by operator

Name: Fesmire & Williams
norm: fesmire williams

Name: Fesmire & Williams
norm: fesmire williams
Industry: Professional Servicesllm

Discovered: Nov 17, 2021
Breach occurred: Nov 17, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 27, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unknown
Threat actor: External

During the incident: Engaged a law firm specializing in cybersecurity and data privacy to investigate further
Engaged third-party forensic specialists to assist in its analysis of any unauthorized activity
Offering complimentary credit monitoring and identity theft protection through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 45 weeks(314 days from discovery to filing)
Compliance flags: CA 60-day late · 314d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 17, 2021
→ Notified: Sep 27, 2022
314d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 17, 2021 → Notified: Sep 27, 2022	314d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGSep 27 · first

Indiana State AGSep 27 · first

Maine State AGSep 27 · first

California State AGSep 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-557653
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 27, 2022
Raw hash: b00e81c80d5a8a9f0f4e8900322894cca18001da8350ef66c3c935366342d266

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityFesmire & Williams

Victim entityFesmire & Williams

Incidentdiscovered Nov 17, 2021

Stated responseEngaged a law firm specializing in cybersecurity and data privacy to investigate further

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov