Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Saltzman & Johnson Law Corporation
bd_3a0e2e2a3be578f9 · schema v1 · pii pii-v1
Full breach record for Saltzman & Johnson Law Corporation →Saltzman & Johnson Law Corporation notified clients of a data breach after an employee's email account was compromised via phishing on March 7, 2022. The unauthorized party used the account to propagate a phishing campaign. Personal information potentially accessed included names, addresses, Social Security numbers, dates of birth, and driver's license numbers. The firm engaged forensic experts, implemented additional authentication and training, and offered credit monitoring services.
California clockDiscovered Mar 7, 2022 → Notified Feb 6, 2023336d ✗ CA 60-day late52 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2075bca9d9455478Montana State AGfiled 2023-02-08(23d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-563864
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 3, 2023
- Raw hash
- 05bb92c95e47980bf41af21b48d1e54e596df511d7854b0ae7f478cbad28617c
Reporting entity
- Name
- Saltzman & Johnson Law Corporationnorm: saltzman johnson law
Victim entity
- Name
- Saltzman & Johnson Law Corporationnorm: saltzman johnson law
Incident
- Discovered
- Mar 7, 2022
- Materiality determined
- —
- Notification sent
- Feb 6, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 52 weeks(361 days from discovery to filing)
- Compliance flags
- CA 60-day late · 336d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 7, 2022→ Notified: Feb 6, 2023336d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.