HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Law Office of Robert T. Bledsoe

bd_22ae19dbc760330b · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 22, 2020

Filed

Oct 5, 2020

To disclose

13 days

Affected

Not disclosed

Confidence

66%

Full breach record for Law Office of Robert T. Bledsoe →

Law Office of Robert T. Bledsoe notified clients on Oct 12, 2020, of a data security incident discovered on Sep 22, 2020. Unauthorized individuals accessed a firm network server to send unauthorized emails. The firm engaged experts, reset passwords, disabled the server, and implemented additional security controls. No unauthorized access to underlying firm data was confirmed. One year of identity theft protection was offered.

J jump to incidentP pin to compareR raw source

California clockDiscovered Sep 22, 2020 → Notified Oct 12, 202020d ✓ CA 60-day OK13 days discovery → filing

Incident timeline

discovery → filing · 13 days

Sep 22, 2020

Discovered

Oct 5, 2020

Filed

vs. sector median

17 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Law Office of Robert T. Bledsoe
norm: law office of robert t bledsoe

Name: Law Office of Robert T. Bledsoe
norm: law office of robert t bledsoe
Industry: Professional Servicesllm

Discovered: Sep 22, 2020
Materiality determined: —
Notification sent: Oct 12, 2020
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Engaged computer experts to help determine what occurred
Reset the passwords to affected email accounts
Turned off the known effected Server
Implemented additional security controls to prevent further unauthorized access
Changes made: Providing one year of Identity theft protection insurance
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 days(13 days from discovery to filing)
Compliance flags: CA 60-day OK · 20d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Sep 22, 2020
→ Notified: Oct 12, 2020
20d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Sep 22, 2020 → Notified: Oct 12, 2020	20d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-194759
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 5, 2020
Raw hash: 5695645d5a90d3433e28df69503646d3e31da59c5b01fdaf5c8f95b31dcebd68

Reporting entityLaw Office of Robert T. Bledsoe

Victim entityLaw Office of Robert T. Bledsoe

Incidentdiscovered Sep 22, 2020

Stated responseEngaged computer experts to help determine what occurred

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov