HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICLowContained
Torhoerman Law, LLC
bd_2162e8c946975d63 · schema v1 · pii pii-v1
Full breach record for Torhoerman Law, LLC →TorHoerman Law, LLC notified clients of a data security incident discovered on May 27, 2025, where an unknown actor accessed an employee's email account. The firm engaged cybersecurity experts, secured the account, and reviewed contents. Personal information, including names and potentially other data, may have been accessed. No indication of misuse was found. The firm is offering 24 months of credit monitoring and fraud assistance.
California clockDiscovered May 27, 2025 → Notified Dec 5, 2025192d ✗ CA 60-day late29 weeks discovery → filing
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_0d629f243723250cMontana State AGfiled 2025-12-15Candidate
- bd_877a20442f2bba2cNew Hampshire State AGfiled 2025-12-18(3d gap)Verified
- bd_94a20491b23d23c1Maine State AGfiled 2025-12-18(3d gap)Verified by operator
- bd_159719cfd63a205fTexas State AGfiled 2025-12-19(4d gap)Verified by operator
Show 2 more filings ↓Show fewer ↑up to 10d gap
- bd_dc045861940c1cb9Vermont State AGfiled 2025-12-22(7d gap)Verified
- bd_46b63efb1e09a2c4Indiana State AGfiled 2025-12-05(10d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-615821
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 15, 2025
- Raw hash
- 1abee5f5a1e2ed784608b15f31589d635f0833ae4e0c96b2a13be265f7b446ac
Reporting entity
- Name
- Torhoerman Law, LLCnorm: torhoerman law
Victim entity
- Name
- Torhoerman Law, LLCnorm: torhoerman law
Incident
- Discovered
- May 27, 2025
- Materiality determined
- —
- Notification sent
- Dec 5, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 29 weeks(202 days from discovery to filing)
- Compliance flags
- CA 60-day late · 192d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 27, 2025→ Notified: Dec 5, 2025192d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.