HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained

Dubroff, Easley, & Lovell LLP

bd_4fb87386ff7a5afc · schema v1 · pii pii-v1

Full breach record for Dubroff, Easley, & Lovell LLP →

Dubroff, Easley, & Lovell, LLP notified the California AG of a data breach where an unauthorized actor gained access to systems between September 2 and September 22, 2025. The firm discovered the incident on September 22, 2025. Personal data may have been acquired. The firm engaged cybersecurity professionals, secured systems, and offered identity monitoring through Kroll.

Leak gap clock⏱ Leak >30d9 weeks discovery → filing

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

bd_abb6058660ab68aeLeak Sitepearfiled 2025-09-15(72d gap)Candidate

Regulatory filings (1) · sorted by filing gap

bd_4507d9e65064bf7dIndiana State AGfiled 2026-03-25(119d gap)Verified

Source provenance

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-614837
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2025
Raw hash: f2131eb2a7150b2c6ae10dd9684085bb800cd38ce757453ebdfd68a4065644f2

Reporting entity

Name: Dubroff, Easley, & Lovell LLP
norm: dubroff easley lovell
Domain: dubrofflaw.com

Victim entity

Name: Dubroff, Easley, & Lovell LLP
norm: dubroff easley lovell
Domain: dubrofflaw.com

Incident

Discovered: Sep 22, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIDENTITY_BASIC
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

Compliance

Time to disclose: 9 weeks(65 days from discovery to filing)
Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Extraction provenance

Status: No extraction artifact recorded for this disclosure.