HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Lgaa LLC
bd_3ea8c2d4373e04d5 · schema v1 · pii pii-v1
Full breach record for Lgaa LLC →LGAA LLC notified the California Attorney General of a data breach occurring on February 20, 2025. An unknown cyber actor accessed a limited portion of LGAA's network used for data migrations and may have copied files containing names. LGAA remediated the activity, investigated, and deleted the affected data. Affected individuals are being offered 12 months of complimentary identity monitoring services.
California clockDiscovered Feb 20, 2025 → Notified Nov 7, 2025260d ✗ CA 60-day late37 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_17f792c1e981412cIndiana State AGfiled 2025-11-07Verified
- bd_cdcebc4abbb5c612New Hampshire State AGfiled 2025-11-07Verified
- bd_d96ea6f22ebd3215Montana State AGfiled 2025-11-07Verified
- bd_e5190cfed5f21fbbMaine State AGfiled 2025-11-07Verified by operator
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-614003
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 7, 2025
- Raw hash
- 9fcfa243de3098ec55954b06a96b790f4dc8e459e718c6953ae8f524f444db21
Reporting entity
- Name
- Lgaa LLCnorm: lgaa
Victim entity
- Name
- Lgaa LLCnorm: lgaa
Incident
- Discovered
- Feb 20, 2025
- Materiality determined
- —
- Notification sent
- Nov 7, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
Compliance
- Time to disclose
- 37 weeks(260 days from discovery to filing)
- Compliance flags
- CA 60-day late · 260d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 20, 2025→ Notified: Nov 7, 2025260d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.