HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Pendrick Capital Partner Holdings, LLC
bd_20f8d12fcada7d80 · schema v1 · pii pii-v1
Full breach record for Pendrick Capital Partner Holdings, LLC →Pendrick Capital Partner Holdings, LLC reported a data breach affecting individuals in multiple states, including California. Unauthorized access to employee email accounts occurred between April 12, 2021, and May 14, 2021. The incident potentially exposed names, Social Security numbers, and financial account information. Pendrick engaged forensic investigators, secured accounts, and offered credit monitoring to affected individuals.
California clockDiscovered May 14, 2021 → Notified Aug 20, 202198d ✗ CA 60-day late14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_251768df5aee988cMaine State AGfiled 2021-08-23Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-544183
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 23, 2021
- Raw hash
- b2da3c65b9c4c9b746ff6c58eaccbf6ddffed95194bf763fb51fdddd2d8ff998
Reporting entity
- Name
- Pendrick Capital Partner Holdings, LLCnorm: pendrick capital partner
- Domain
- pendrickcp.com
Victim entity
- Name
- Pendrick Capital Partner Holdings, LLCnorm: pendrick capital partner
- Domain
- pendrickcp.com
Incident
- Discovered
- May 14, 2021
- Materiality determined
- —
- Notification sent
- Aug 20, 2021
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- notified regulatory authorities, as required by law
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 weeks(101 days from discovery to filing)
- Compliance flags
- CA 60-day late · 98d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 14, 2021→ Notified: Aug 20, 202198d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.