DisclosureLens
UnknownRetail & ConsumerRetailFinancial accountIdentity (basic)Government IDPHIHealth (basic)High

Berkeley Research Group, LLC

bd_2fde5d09d3ecf17e · schema v1 · pii pii-v1

Severity

High

Discovered

Mar 2, 2025

Filed

Nov 4, 2025

To disclose

35 weeks

Affected · nationwide

6,08399 in this filing

Linked

18 filings

Confidence

95%
Full breach record for Berkeley Research Group, LLC →2 incidents on file

Berkeley Research Group, LLC based in Emeryville, California, a business – retail or merchant entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-03-02 and reported on 2025-11-04. 99 Texas residents were affected. 6,083 individuals affected in total. Types of information involved: Name of individual;Address;Social Security Number Information;Driver’s License number;Government-issued ID number (e.g. passport, state ID card);Financial Information (e.g. account number, credit or debit card number);Medical Information;Health Insurance Information;Other;Date of Birth. Consumers were notified via Posted at company website or special website;U.S. Mail.

Incident timeline

undetected · 2 days
discovery → filing · ≤ 35 weeks / 247 days

Feb 28, 2025

Begins

Mar 2, 2025

Discovered

Nov 4, 2025

Filed

This filing is one of 18 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Show 6 more filings ↓up to 301d gap

Showing first 10 of 17 linked disclosures.

Filing propagation · 11 filings · 10 states

View merged incident ↗
Indiana State AGOct 30 · first
Delaware State AGOct 30 · first
Maine State AGOct 30 · first
Washington State AGOct 30 · first
Iowa State AGOct 30 · first
Nebraska State AGOct 30 · first
New Hampshire State AG+4d
Texas State AG+5d · this page
California State AG+305d
Vermont State AG+305d
Texas State AG+306d

Pattern: first filing Oct 30 (IN), last Sep 1 (TX) — a 306-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 17 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.