Social EngineeringPhishingTargetedCREDENTIALSAUTHENTICATIONLowContained
Law Offices of John A. Guthrie
bd_211af2c521dd498d · schema v1 · pii pii-v1
Full breach record for Law Offices of John A. Guthrie →Law Offices of John A. Guthrie notified the California AG of a phishing incident where an imposter sent scam emails from compromised law firm addresses on March 17, 2023. The emails contained links to a fake Adobe PDF designed to steal Microsoft login credentials. The firm stopped the attack, notified Adobe, and advised recipients to change passwords if they entered credentials.
California clockDiscovered Mar 17, 2023 → Notified Mar 18, 20231d ✓ CA 60-day OK≤1 day discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-564515
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 17, 2023
- Raw hash
- 0d5345b6532e24fef94159989b605e7596a4dd6a36230a27078b228634bdd9b6
Reporting entity
- Name
- Law Offices of John A. Guthrienorm: law offices of john a guthrie
- Domain
- johnaguthrielaw.com
Victim entity
- Name
- Law Offices of John A. Guthrienorm: law offices of john a guthrie
- Domain
- johnaguthrielaw.com
Incident
- Discovered
- Mar 17, 2023
- Materiality determined
- —
- Notification sent
- Mar 18, 2023
- Affected individuals
- Not disclosed
- Data types
- CREDENTIALSAUTHENTICATION
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 1d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 17, 2023→ Notified: Mar 18, 20231d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.