M&Y Personal Injury Lawyers
bd_4e5c00fb9102f213 · schema v1 · pii pii-v1
Full breach record for M&Y Personal Injury Lawyers →M&Y Personal Injury Lawyers notified the California Attorney General of a data breach involving archived client records. On November 25, 2025, the firm identified suspicious activity on a server used for historical record keeping. Investigation revealed that an unknown actor viewed and downloaded files on or about November 23, 2025. Affected data may include names, Social Security numbers, financial account information, driver's license numbers, dates of birth, health insurance information, and medical information. The firm terminated server access, reported the incident to federal law enforcement, and is offering credit monitoring and identity restoration services to affected individuals.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-619467
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 27, 2026
- Raw hash
- a764674942b54561a007484ae75e6019a10b30330d3a7e8358d01deb2d7702b2
Reporting entity
- Name
- M&Y Personal Injury Lawyersnorm: m y personal injury lawyers
Victim entity
- Name
- M&Y Personal Injury Lawyersnorm: m y personal injury lawyers
Incident
- Discovered
- Nov 25, 2025
- Materiality determined
- —
- Notification sent
- Feb 27, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported the event to federal law enforcement
Compliance
- Time to disclose
- 13 weeks(94 days from discovery to filing)
- Compliance flags
- CA 60-day late · 94dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 25, 2025→ Notified: Feb 27, 202694d 60 days (analyst band, pre-2026 discoveries) CA 60-day late California Consumers notified: Feb 27, 2026→ AG copy submitted: Feb 27, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.