HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICMINORMediumContained
Whittaker & Company
bd_3bc52a4b6e7cdd1e · schema v1 · pii pii-v1
Full breach record for Whittaker & Company →Whittaker & Company reported unauthorized access to its computer network between February 28 and March 13, 2025. An unauthorized actor obtained copies of certain documents containing personal information, including data of minors. The company engaged a cybersecurity firm, notified law enforcement, and offered one year of identity monitoring services through Kroll to affected individuals.
Leak gap clock⏱ Leak >90d
⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
This filing is one of 3 about the same incident.View merged incident
A leak claim by spacebears about this victim predates this filing by 117 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_84ce7e644f616e3eMaine State AGfiled 2025-06-27Candidate
- bd_9933baea0a9a9f66Indiana State AGfiled 2025-06-27Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-604594
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 27, 2025
- Raw hash
- eb6a2d84266318c1f6414dd49dbda3e0967457a885f24bec89ed65bedad69da1
Reporting entity
- Name
- Whittaker & Companynorm: whittaker
- Domain
- whittakercpas.com
Victim entity
- Name
- Whittaker & Companynorm: whittaker
- Domain
- whittakercpas.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICMINOR
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated CollectionT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified California Attorney General
Compliance
- Compliance flags
- Leak >90d
- Discovery-date grounding
- no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.