HackingDelayed DiscoveryData ExfiltratedIDENTITY_BASICLowContained
Lozano Smith
bd_1722cde03e15c7b6 · schema v1 · pii pii-v1
Full breach record for Lozano Smith →Lozano Smith, a professional services firm, disclosed a cybersecurity incident where an unauthorized actor accessed systems in January 2020. The actor was detected in April 2021 but did not encrypt systems. Lozano Smith took systems offline, reset passwords, and engaged forensic experts. Personal information, including names and other data elements, was potentially accessed. No evidence of misuse was found. Lozano Smith offered complimentary credit monitoring to affected individuals.
California clockDiscovered Apr 7, 2021 → Notified Dec 14, 2021251d ✗ CA 60-day late36 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-548523
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 14, 2021
- Raw hash
- 2351afdc5094eae99be77a421268c358299c66d28c8d318c8d4ef29f1f33a928
Reporting entity
- Name
- Lozano Smithnorm: lozano smith
Victim entity
- Name
- Lozano Smithnorm: lozano smith
Incident
- Discovered
- Apr 7, 2021
- Materiality determined
- —
- Notification sent
- Dec 14, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 36 weeks(251 days from discovery to filing)
- Compliance flags
- CA 60-day late · 251d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 7, 2021→ Notified: Dec 14, 2021251d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.