HackingData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)MinorMediumContained

Whittaker & Company

bd_3bc52a4b6e7cdd1e · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 27, 2025

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for Whittaker & Company →

Whittaker & Company reported unauthorized access to its computer network between February 28 and March 13, 2025. An unauthorized actor obtained copies of certain documents containing personal information, including data of minors. The company engaged a cybersecurity firm, notified law enforcement, and offered one year of identity monitoring services through Kroll to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Feb 28, 2025

Begins

Jun 27, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

A leak claim by spacebears about this victim predates this filing by 117 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitespacebearsbd_bec671c9d907facc2025-03-02 · +117dVerified by operator

Regulatory filings (4) · sorted by filing gap

Nebraska State AGbd_4ec11ae8aa8ad93e2025-06-27Verified
Maine State AGbd_84ce7e644f616e3e2025-06-27Verified by operator
Massachusetts State AGbd_879a12df618c586c2025-06-27Verified
Indiana State AGbd_9933baea0a9a9f662025-06-27Verified

Name: Whittaker & Company
norm: whittaker
Domain: whittakercpas.com

Name: Whittaker & Company
norm: whittaker
Domain: whittakercpas.com

Discovered: —
Breach occurred: Feb 28, 2025 – Mar 13, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Minor
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified California Attorney General

During the incident: Immediately took measures to secure our systems
Launched an investigation with the help of a cybersecurity firm
Reported the incident to law enforcement
Arranged for affected individuals to receive a complimentary, one-year membership of identity monitoring services through Kroll
Changes made: Implemented additional measures to enhance the security of our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Nebraska State AGJun 27 · first

Maine State AGJun 27 · first

Massachusetts State AGJun 27 · first

Indiana State AGJun 27 · first

California State AGJun 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-604594
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 27, 2025
Raw hash: eb6a2d84266318c1f6414dd49dbda3e0967457a885f24bec89ed65bedad69da1

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityWhittaker & Company

Victim entityWhittaker & Company

IncidentUnauthorized Access

Stated responseImmediately took measures to secure our systems

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov