HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Arcadia Publishing, Inc
bd_3cfc2141bc9571ce · schema v1 · pii pii-v1
Full breach record for Arcadia Publishing, Inc →Arcadia Publishing, Inc. reported unauthorized access to certain files and folders within its systems from March 6, 2023, through April 19, 2023. The company became aware of suspicious activity on April 19, 2023. The investigation determined that names and Social Security numbers of California residents were potentially accessed. Arcadia engaged in system restoration, forensic investigation, and file review. Affected individuals are offered 12 months of complimentary identity monitoring through Kroll. The company is reviewing policies and implementing additional safeguards.
California clockDiscovered Apr 19, 2023 → Notified Aug 18, 2023121d ✗ CA 60-day late24 weeks discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5afcc48675649bc0Montana State AGfiled 2023-10-04Verified
- bd_7b81b35e181b1bf3Vermont State AGfiled 2023-10-04Verified
- bd_a48c88ef2a51812dMaine State AGfiled 2023-10-04Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-574649
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 4, 2023
- Raw hash
- b42802b3d25906d6cf31ab02e8610cdfa75d4863a0e67ef0c52df0eb5528a5df
Reporting entity
- Name
- Arcadia Publishing, Incnorm: arcadia publishing
Victim entity
- Name
- Arcadia Publishing, Incnorm: arcadia publishing
Incident
- Discovered
- Apr 19, 2023
- Materiality determined
- —
- Notification sent
- Aug 18, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 24 weeks(168 days from discovery to filing)
- Compliance flags
- CA 60-day late · 121d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 19, 2023→ Notified: Aug 18, 2023121d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.