HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Catwig LLC
bd_4f2afc32724215b8 · schema v1 · pii pii-v1
Full breach record for Catwig LLC →Victory Disability (Catwig LLC) notified the California AG of a breach where an unknown party accessed their environment from Oct 27 to Nov 12, 2025. Affected data may include names, contact info, SSNs, dates of birth, and medical information. The firm engaged third-party cybersecurity specialists, notified law enforcement, and is offering 24 months of credit monitoring.
California clockDiscovered Nov 1, 2025 → Notified Dec 12, 202541d ✓ CA 60-day OK6 weeks discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_502f45648d1ceb70Montana State AGfiled 2025-12-12Verified
- bd_b412ce6620254e4bIndiana State AGfiled 2025-12-12Verified
- bd_8a61b1020efbe5a7New Hampshire State AGfiled 2025-12-15(3d gap)Verified
- bd_e7260a4d77511178Texas State AGfiled 2025-12-16(4d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-615691
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 12, 2025
- Raw hash
- 24f359ccfb55e3acadbc1315fb72bda661195e67b3b79d252e0863dc741b5f81
Reporting entity
- Name
- Catwig LLCnorm: catwig
Victim entity
- Name
- Catwig LLCnorm: catwig
Incident
- Discovered
- Nov 1, 2025
- Materiality determined
- —
- Notification sent
- Dec 12, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement authorities
Compliance
- Time to disclose
- 6 weeks(41 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 41d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 1, 2025→ Notified: Dec 12, 202541d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.