HackingCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
illumifin
bd_4f85d73db2552a71 · schema v1 · pii pii-v1
Full breach record for illumifin →On November 4, 2025, illumifin Corporation identified unusual network activity and contained unauthorized access. An investigation determined an unauthorized person accessed the network and acquired copies of files containing client information. The company engaged forensic investigators, notified law enforcement, and implemented additional safeguards. Affected individuals were notified in February 2026.
California clockDiscovered Nov 4, 2025 → Notified Feb 25, 2026113d ✗ CA 60-day late≤1 day discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-621109
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 4, 2025
- Raw hash
- c658ec1d1c5a24dda26c0ea93c27902214288f2606e5d230a084cf3b3cf8decd
Reporting entity
- Name
- illumifin
- Domain
- illumifin.com
Victim entity
- Name
- illumifin
- Domain
- illumifin.com
Incident
- Discovered
- Nov 4, 2025
- Materiality determined
- —
- Notification sent
- Feb 25, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- CA 60-day late · 113dCA AG copy ≤15d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 4, 2025→ Notified: Feb 25, 2026113d 60 days (analyst band, pre-2026 discoveries) CA 60-day late California Consumers notified: Feb 25, 2026→ AG copy submitted: Nov 4, 2025— 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.