HackingSupply Chain (3P Vendor)Customer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
The Class Action Lawsuit
bd_1784365e15a19ca7 · schema v1 · pii pii-v1
Full breach record for The Class Action Lawsuit →Apex Class Action, LLC notified consumers that their personal information, potentially including Social Security numbers, was accessed without authorization via a third-party vendor, IMDataCenter. The company was alerted to the incident on July 14, 2025, and confirmed involvement on July 25, 2025. The breach did not involve Apex's own network. Complimentary identity protection services are being offered.
California clockDiscovered Jul 14, 2025 → Notified Aug 15, 202532d ✓ CA 60-day OK5 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_c281109bd1c849d9Indiana State AGfiled 2025-08-18Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-607368
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 18, 2025
- Raw hash
- f1f1f3d4a3674d264777542796f0c07d95f41293c98992d56d65419ebbff8f14
Reporting entity
- Name
- Apex Class Action, LLCnorm: apex class action
Victim entity
- Name
- The Class Action Lawsuitnorm: the class action lawsuit
- Domain
- theclassactionlawsuit.com
Incident
- Discovered
- Jul 14, 2025
- Materiality determined
- —
- Notification sent
- Aug 15, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Third party
- via IMDataCenter
- Initial access
- trusted_relationship
Compliance
- Time to disclose
- 5 weeks(35 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 32d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 14, 2025→ Notified: Aug 15, 202532d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.