HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Rodenburg Law Firm

bd_2cb09808286009aa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 26, 2025

Filed

Jul 2, 2026

To disclose

44 weeks

Affected

Not disclosed

Linked

10 filings

Confidence

64%

Full breach record for Rodenburg Law Firm →

Rodenburg Law Firm disclosed unauthorized access to its network on August 26, 2025. An unknown third party accessed files containing names, SSNs, dates of birth, payment card numbers, and medical information. The firm engaged cybersecurity experts and notified law enforcement. Affected individuals are offered 12 months of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 26, 2025 → Notified Apr 21, 2026238d ✗ CA 60-day late44 weeks discovery → filing

Incident timeline

discovery → filing · 44 weeks / 310 days

Aug 26, 2025

Begins

Aug 26, 2025

Discovered

Jul 2, 2026

Filed

vs. sector median

+27 wks slower

This filing is one of 10 about the same incident.View merged incident

A leak claim by akira about this victim predates this filing by 205 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteakirabd_1a74bcdfcf80c00e2025-12-09 · +205dVerified by operator

Regulatory filings (8) · sorted by filing gap

New Hampshire State AGbd_024bc57dbb83a9872026-04-30 · +63dVerified by operator
Montana State AGbd_2ad9293ec709d4c32026-04-24 · +69dVerified
Texas State AGbd_53c4f9349bf31efa2026-04-24 · +69dVerified
Massachusetts State AGbd_7a68daed0d73bc122026-04-24 · +69dVerified by operator

Show 4 more filings ↓up to 72d gap

Maine State AGbd_a5c6dca43ebda5f72026-04-24 · +69dVerified
Indiana State AGbd_10184fd32a2663bc2026-04-21 · +72dVerified
Indiana State AGbd_af98f5f1e940fea22026-04-21 · +72dVerified by operator
Nebraska State AGbd_dbfcebfb506b42e42026-04-21 · +72dVerified

Name: Rodenburg Law Firm
norm: rodenburg law firm
Domain: rodenburgllp.com

Name: Rodenburg Law Firm
norm: rodenburg law firm
Domain: rodenburgllp.com
Industry: Professional Servicesllm

Discovered: Aug 26, 2025
Breach occurred: Aug 26, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 21, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Launched an investigation to understand the scope of the issue
Engaged cybersecurity experts to assist
Notified law enforcement
Providing complimentary credit monitoring services
Changes made: Bolster current security protocols
Continuously reviewing policies and upgrading security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 44 weeks(310 days from discovery to filing)
Compliance flags: CA 60-day late · 238dCA AG copy >15d · 72dLeak >180d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 26, 2025
→ Notified: Apr 21, 2026
238d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
California
Consumers notified: Apr 21, 2026
→ AG copy submitted: Jul 2, 2026
72d 15 calendar days CA AG copy >15d

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 26, 2025 → Notified: Apr 21, 2026	238d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late
California	Consumers notified: Apr 21, 2026 → AG copy submitted: Jul 2, 2026	72d	15 calendar days	CA AG copy >15d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 8 states

View merged incident ↗

Indiana State AGApr 21 · first

Nebraska State AGApr 21 · first

Montana State AG+3d

Texas State AG+3d

Massachusetts State AG+3d

Maine State AG+3d

New Hampshire State AG+9d

California State AG+72d · this page

Pattern: first filing Apr 21 (IN), last Jul 2 (CA) — a 72-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-625864
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 2, 2026
Raw hash: 0915bc247f2421f9b55a2f12869c56dc01a44b00a161fbb4443abafa98d8cec7

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityRodenburg Law Firm

Victim entityRodenburg Law Firm

Incidentdiscovered Aug 26, 2025

Stated responseLaunched an investigation to understand the scope of the issue

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov