HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICFINANCIALMediumActive
Compex Legal Services
bd_37494d5f18dc2ef3 · schema v1 · pii pii-v1
Full breach record for Compex Legal Services →Compex Legal Services Inc. discovered unauthorized access to its network starting April 9, 2024, after detecting suspicious activity on April 17, 2024. An unknown actor acquired certain files containing names, dates of birth, Social Security numbers, and medical information. The company is investigating with third-party specialists and reviewing affected data before notifying individuals.
Leak gap clock⏱ Leak >30d14 weeks discovery → filing
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_0588ccacc7611641Leak Sitecl0pfiled 2024-05-04(80d gap)Verified
Regulatory filings (4) · sorted by filing gap
- bd_953495f025c39606Wisconsin State AGfiled 2024-07-24Verified
- bd_0e0c8e276e11a0dcVermont State AGfiled 2024-08-29(36d gap)Verified
- bd_27ddf809b97c17eeCalifornia State AGfiled 2024-08-30(37d gap)Verified
- bd_d56b2efa27580456California State AGfiled 2024-10-25(93d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-589239
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 24, 2024
- Raw hash
- 61fd7f457b07c8e30ba96505c645664f5bf1bd6fb25a419916bd8ed0c04ea226
Reporting entity
- Name
- Compex Legal Servicesnorm: compex legal
- Domain
- compexlegal.com
Victim entity
- Name
- Compex Legal Servicesnorm: compex legal
- Domain
- compexlegal.com
Incident
- Discovered
- Apr 17, 2024
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Filed breach notification with California Attorney General
Compliance
- Time to disclose
- 14 weeks(98 days from discovery to filing)
- Compliance flags
- Leak >30d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.