HackingTechnologyProfessional ServicesInformationData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)EmploymentLowContained

LCPtracker

bd_4ac47077bd9ff2d3 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 20, 2024

Filed

Jan 14, 2025

To disclose

21 weeks

Affected

Not disclosed

Linked

11 filings

Confidence

65%

Full breach record for LCPtracker →

LCPtracker, Inc. experienced unauthorized access to its online storage account environment between August 14 and August 20, 2024. The company became aware of the incident on August 20, 2024. An unauthorized actor accessed and acquired certain files and data. The company engaged a third-party cybersecurity firm for investigation and is providing 12 months of credit monitoring and fraud assistance to affected individuals. The incident involved sensitive personal information related to payroll and workforce reporting services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Aug 20, 2024 → Notified Jan 10, 2025143d ✗ CA 60-day late21 weeks discovery → filing

Incident timeline

undetected · 6 days

discovery → filing · 21 weeks / 147 days

Aug 14, 2024

Begins

Aug 20, 2024

Discovered

Jan 14, 2025

Filed

vs. sector median

+2 wks slower

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_5fe6cef2935f0f9c2024-12-20 · +25dVerified
Massachusetts State AGbd_0180907d27863f622024-11-22 · +53dVerified
California State AGbd_07ceb60a4a6fe6c02024-11-22 · +53dCandidate
New Hampshire State AGbd_0e244ae40a6462c92024-11-22 · +53dVerified

Show 6 more filings ↓up to 74d gap

Washington State AGbd_34557b06fe467f712024-11-22 · +53dVerified
Montana State AGbd_4726fd00272b61e62024-11-22 · +53dVerified
Vermont State AGbd_520a0c887a11a2952024-11-22 · +53dVerified
Maine State AGbd_8fd5b2be60792c2f2024-11-22 · +53dVerified
Indiana State AGbd_f0bef15520af331e2024-11-22 · +53dVerified
Illinois State AGbd_f9f2519d3dbcab082024-11-01 · +74dVerified

Name: LCPtracker
norm: lcptracker
Domain: prod-cdn.lcptracker.net

Name: LCPtracker
norm: lcptracker
Domain: prod-cdn.lcptracker.net
Industry: TechnologyllmProfessional Servicesllm

Discovered: Aug 20, 2024
Breach occurred: Aug 14, 2024 – Aug 20, 2024
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 10, 2025
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Employment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Engaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation
Conducted a comprehensive review of the impacted data to identify impacted individuals
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge for 12 months
Providing proactive fraud assistance through Cyberscout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(147 days from discovery to filing)
Compliance flags: CA 60-day late · 143d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Aug 20, 2024
→ Notified: Jan 10, 2025
143d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Aug 20, 2024 → Notified: Jan 10, 2025	143d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Illinois State AGNov 1 · first

Massachusetts State AG+21d

California State AG+21d

New Hampshire State AG+21d

Washington State AG+21d

Montana State AG+21d

Vermont State AG+21d

Maine State AG+21d

Indiana State AG+21d

California State AG+49d

California State AG+74d · this page

Pattern: first filing Nov 1 (IL), last Jan 14 (CA) — a 74-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-597348
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 14, 2025
Raw hash: ce377235c27df3fba7c74f4468563ece18acb30e531f98e06559a44c6bcce6ce

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityLCPtracker

Victim entityLCPtracker

Incidentdiscovered Aug 20, 2024

Stated responseEngaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov