UnknownEmployee Data InvolvedIdentity (basic)EmploymentLowActive

Ethan Conrad Properties, Inc.

bd_31a7acd06d0a42a6 · schema v1 · pii pii-v2

Severity

Low

Discovered

Aug 24, 2026

Filed

Sep 21, 2026

To disclose

28 days

Affected

Not disclosed

Confidence

69%

Full breach record for Ethan Conrad Properties, Inc. →

Ethan Conrad Properties notified employees of a cybersecurity incident discovered on August 24, 2026. The company detected suspicious activity and engaged third-party forensic specialists. Employee data, including names, may have been impacted. The investigation is ongoing. The company is offering 12 months of complimentary credit monitoring via Cyberscout.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 24, 2026 → Notified Sep 18, 202625d ✓ CA 30-day OK28 days discovery → filing

Incident timeline

discovery → filing · 28 days

Aug 24, 2026

Begins

Aug 24, 2026

Discovered

Sep 21, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Ethan Conrad Properties, Inc.
norm: ethan conrad properties

Name: Ethan Conrad Properties, Inc.
norm: ethan conrad properties

Discovered: Aug 24, 2026
Breach occurred: Aug 24, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 18, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Employment
Attack vector: Unknown

During the incident: Took swift action to secure our network
Engaged third-party computer specialists to investigate the full nature and scope of the incident
Arranged for you to activate, at no cost to you, online credit monitoring services for 12 months provided by Cyberscout, a Transunion company
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: CA 30-day OK · 25dCA AG copy ≤15d · 3d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 24, 2026
→ Notified: Sep 18, 2026
25d 30 calendar days CA 30-day OK
California
Consumers notified: Sep 18, 2026
→ AG copy submitted: Sep 21, 2026
3d 15 calendar days CA AG copy ≤15d

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 24, 2026 → Notified: Sep 18, 2026	25d	30 calendar days	CA 30-day OK
California	Consumers notified: Sep 18, 2026 → AG copy submitted: Sep 21, 2026	3d	15 calendar days	CA AG copy ≤15d

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-630085
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 21, 2026
Raw hash: eb168216186ed6935984a6e0516cca6da20a113c43bdfd2d525927375403034b

Reporting entityEthan Conrad Properties, Inc.

Victim entityEthan Conrad Properties, Inc.

Incidentdiscovered Aug 24, 2026

Stated responseTook swift action to secure our network

ComplianceCA 30-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov