HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMINORMediumContained
McKell Financial
bd_4b68750808ca8e0e · schema v1 · pii pii-v1
Full breach record for McKell Financial →McKell Financial Group experienced a data security incident where an unauthorized party accessed an individual's email mailbox. The company became aware of suspicious activity on June 17, 2024. The breach occurred on June 7, 2024. Personal information of clients, employees, and dependents (including minors) may have been acquired, including names, SSNs, and financial account details. The company engaged independent investigators, secured the email tenant, and offered credit monitoring services.
California clockDiscovered Jun 17, 2024 → Notified Oct 4, 2024109d ✗ CA 60-day late16 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2d501929fb7f4adbNew Hampshire State AGfiled 2024-10-08Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-593058
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 8, 2024
- Raw hash
- 88838857ba262a93743514fef11d6fe9e9460905825bda708d272be51f9e54d0
Reporting entity
- Name
- McKell Financialnorm: mckell financial
- Domain
- mckellfinancial.com
Victim entity
- Name
- McKell Financialnorm: mckell financial
- Domain
- mckellfinancial.com
Incident
- Discovered
- Jun 17, 2024
- Materiality determined
- —
- Notification sent
- Oct 4, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMINOR
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1114 Email CollectionT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notification with California Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 16 weeks(113 days from discovery to filing)
- Compliance flags
- CA 60-day late · 109d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 17, 2024→ Notified: Oct 4, 2024109d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.