HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Andrew Lundholm CPA
bd_1daccf3964fdb3a8 · schema v1 · pii pii-v1
Full breach record for Andrew Lundholm CPA →Andrew Lundholm, CPA discovered a cybersecurity attack on April 13, 2022, where an unknown actor gained unauthorized access to the network and obtained personal information. Affected data may include names, Social Security numbers, driver's license or state ID numbers, dates of birth, and tax identification numbers. The firm engaged cybersecurity experts, secured its environment, and offered complimentary credit monitoring and identity protection services through IDX.
California clockDiscovered Apr 13, 2022 → Notified May 24, 202241d ✓ CA 60-day OK6 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-553693
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 24, 2022
- Raw hash
- 97f3d8f4effa3cc5bc3b47a759e827b1ebe678041866bcd5df49a1110818f4cb
Reporting entity
- Name
- Andrew Lundholm CPAnorm: andrew lundholm cpa
- Domain
- aclcpa.net
Victim entity
- Name
- Andrew Lundholm CPAnorm: andrew lundholm cpa
- Domain
- aclcpa.net
Incident
- Discovered
- Apr 13, 2022
- Materiality determined
- —
- Notification sent
- May 24, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 41d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 13, 2022→ Notified: May 24, 202241d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.