PhysicalTheftCustomer Data InvolvedEmployee Data InvolvedIDENTITY_BASICLowContained
Jackson Lewis
bd_31d8496094b8a994 · schema v1 · pii pii-v1
Full breach record for Jackson Lewis →Jackson Lewis P.C. reported the theft of two hard drives from a locked storage room in one of its offices on January 7, 2022. The drives contained confidential information of personnel and clients, including full names. The firm determined on August 16, 2022, that personal information was stored on the stolen drives. A review completed on November 19, 2022, identified affected individuals. Notifications were sent between December 9 and December 20, 2022. The firm is offering 12 months of complimentary credit monitoring.
California clockDiscovered Aug 16, 2022 → Notified Dec 20, 2022126d ✗ CA 60-day late22 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_a99ede413afc86c7California State AGfiled 2023-02-17(28d gap)Verified
- bd_b61502b887ceaf50HHS OCRfiled 2023-02-17(28d gap)Verified
- bd_36a72583dcda602bCalifornia State AGfiled 2023-03-16(55d gap)Candidate
- bd_ddf5bc42f4f20a9eNew Hampshire State AGfiled 2023-03-20(59d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-562033
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 20, 2023
- Raw hash
- 784b69ead50f55ffa8e5fdd4cfcbc32824e2a32fb81ac0494eb4b0608567f292
Reporting entity
- Name
- Jackson Lewisnorm: jackson lewis
- Domain
- jacksonlewis.com
Victim entity
- Name
- Jackson Lewisnorm: jackson lewis
- Domain
- jacksonlewis.com
Incident
- Discovered
- Aug 16, 2022
- Materiality determined
- —
- Notification sent
- Dec 20, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Threat actor
- External
Compliance
- Time to disclose
- 22 weeks(157 days from discovery to filing)
- Compliance flags
- CA 60-day late · 126d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 16, 2022→ Notified: Dec 20, 2022126d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.