UnknownCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPHIMediumActive

Acme Press, Inc. dba Calitho

bd_3d84242469e8a10d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 23, 2021

Filed

Jan 24, 2022

To disclose

5 weeks

Affected

Not disclosed

Confidence

65%

Acme Press, Inc. dba Calitho notified California residents of a security incident discovered on December 23, 2021, involving suspicious network activity and inaccessible files. The investigation is ongoing, and unauthorized access cannot be ruled out. Affected data may include names, SSNs, driver's license/passport/military IDs, financial account numbers, and health insurance information. The company engaged forensic investigation, implemented additional monitoring, notified the FBI, and offered 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Dec 23, 2021 → Notified Jan 24, 202232d ✓ CA 60-day OK5 weeks discovery → filing

Incident timeline

discovery → filing · 5 weeks / 32 days

Dec 23, 2021

Discovered

Jan 24, 2022

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Acme Press, Inc.
norm: acme press

Name: Acme Press, Inc. dba Calitho
norm: acme press
Domain: acmepress.org
Also named: Acme Press, Inc.dba oflegal entity
Calithodba oftrade name

Discovered: Dec 23, 2021
Materiality determined: —
Notification sent: Jan 24, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPHI
Data elements: Social Security number
Attack vector: Unknown
Regulator citations: Notified the FBINotifying regulators, as necessary

During the incident: Launched an investigation to determine the nature and scope of the incident
Took steps to confirm the security of our systems
Implemented additional network and endpoint monitoring
Notified the FBI of this incident
Notifying regulators, as necessary
Offering access to 24 months of complimentary credit monitoring services through IDX
Changes made: Implemented additional network and endpoint monitoring
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: CA 60-day OK · 32d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Dec 23, 2021
→ Notified: Jan 24, 2022
32d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Dec 23, 2021 → Notified: Jan 24, 2022	32d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-550250
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 24, 2022
Raw hash: 39b599768dad88ff428c9405b4d5f0f90b78c389817ad0020d6991d5a6e5efa3

Reporting entityAcme Press, Inc.

Victim entityAcme Press, Inc. dba Calitho

Incidentdiscovered Dec 23, 2021

Stated responseLaunched an investigation to determine the nature and scope of the incident

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov