HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

Pond North LLP

bd_581730d18790b23f · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 22, 2025

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

67%

Full breach record for Pond North LLP →

Pond North LLP reported that an unauthorized individual accessed an employee email account between December 7, 2023, and February 2, 2024. The investigation, concluded on July 1, 2025, determined that full names and other personal information were exposed. Approximately 5 Rhode Island residents were affected. The firm engaged outside cybersecurity professionals and is offering complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 7, 2023

Begins

Jul 22, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_9cca196479308e4a2025-07-22Verified
Indiana State AGbd_85cdb7893fe59ac92025-07-25 · +3dVerified

Name: Pond North LLP
norm: pond north
Domain: pondnorth.com

Name: Pond North LLP
norm: pond north
Domain: pondnorth.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Dec 7, 2023 – Feb 2, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Launched a lengthy and thorough investigation in consultation with outside cybersecurity professionals
Analyzed the extent of any compromise of the email account and the security of the emails and attachments contained within it
Devoted considerable time and effort to determine what information was contained in the affected email account
Set up a dedicated and confidential toll-free response line
Changes made: Offering a complimentary membership in Equifax Credit WatchTM Gold
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJul 22 · first

California State AGJul 22 · first · this page

Indiana State AG+3d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-605901
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 22, 2025
Raw hash: 6fbd9ea799cf0cc1095dd14500c0b9a290c01eacd2570d7fae60fb6a2fea4422

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityPond North LLP

Victim entityPond North LLP

IncidentUnauthorized Access

Stated responseLaunched a lengthy and thorough investigation in consultation with outside cybersecurity professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov