HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Pahl & McCay
bd_41f50d6ea467dc3f · schema v1 · pii pii-v1
Full breach record for Pahl & McCay →Pahl & McCay experienced unauthorized access to corporate email accounts between May 11, 2023, and June 7, 2023. The company discovered the incident on June 7, 2023. Affected data may include names, addresses, and Social Security numbers. The company reset passwords, revoked MFA sessions, and offered credit monitoring services.
California clockDiscovered Jun 7, 2023 → Notified Nov 17, 2023163d ✗ CA 60-day late23 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-576749
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 17, 2023
- Raw hash
- e303c7114f2c9da93a563b8a34cf1062cc0054a87d548ec0611a1f61a09667ec
Reporting entity
- Name
- Pahl & McCaynorm: pahl mccay
- Domain
- pahl-mccay.com
Victim entity
- Name
- Pahl & McCaynorm: pahl mccay
- Domain
- pahl-mccay.com
Incident
- Discovered
- Jun 7, 2023
- Materiality determined
- —
- Notification sent
- Nov 17, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
Compliance
- Time to disclose
- 23 weeks(163 days from discovery to filing)
- Compliance flags
- CA 60-day late · 163d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 7, 2023→ Notified: Nov 17, 2023163d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.