HackingCustomer Data InvolvedIdentity (basic)LowContained

Gresser Inc. and Affiliates

bd_3a67cf3bc2db087a · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 10, 2023

Filed

Mar 18, 2024

To disclose

36 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for Gresser Inc. and Affiliates →

Gresser Inc. and Affiliates notified the California Attorney General of a data security event where an unauthorized actor accessed limited information between July 7 and July 10, 2023. The company discovered the network disruption on July 10, 2023. Affected data may include first and last names in combination with other personal information. The company engaged third-party specialists, secured its environment, implemented additional technical safeguards, and offered complimentary credit monitoring and identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jul 10, 2023 → Notified Mar 19, 2024253d ✗ CA 60-day late36 weeks discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 36 weeks / 252 days

Jul 7, 2023

Begins

Jul 10, 2023

Discovered

Mar 18, 2024

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Gresser Inc. and Affiliates
norm: gresser inc and affiliates

Name: Gresser Inc. and Affiliates
norm: gresser inc and affiliates

Discovered: Jul 10, 2023
Breach occurred: Jul 7, 2023 – Jul 10, 2023
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 19, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown
Threat actor: External

During the incident: Took immediate action to address and investigate the event
Engaged third-party specialists to assist with determining the nature and scope of the event
Secured our environment
Implemented additional technical safeguards to further enhance the security of information in our possession and to prevent similar events from happening in the future
Offering complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession and to prevent similar events from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 36 weeks(252 days from discovery to filing)
Compliance flags: CA 60-day late · 253d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jul 10, 2023
→ Notified: Mar 19, 2024
253d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jul 10, 2023 → Notified: Mar 19, 2024	253d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-582609
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 18, 2024
Raw hash: 0719c454a8100576861755af7e349c13eca5d466297e49495e152920c2263a16

Reporting entityGresser Inc. and Affiliates

Victim entityGresser Inc. and Affiliates

Incidentdiscovered Jul 10, 2023

Stated responseTook immediate action to address and investigate the event

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov