HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICLowContained
Mehri & Skalet, PLLC
bd_5df6d7b3c0b9ba81 · schema v1 · pii pii-v1
Full breach record for Mehri & Skalet, PLLC →Mehri & Skalet, PLLC notified the California AG of an incident where an unauthorized actor accessed an employee's email account on December 17, 2024, and downloaded information. The firm identified suspicious activity on May 20, 2025, secured the email tenant, and launched an investigation. The breach involved names and other data elements. The firm reported the incident to law enforcement and is offering identity protection services to affected individuals in multiple states.
California clockDiscovered May 20, 2025 → Notified Nov 19, 2025183d ✗ CA 60-day late26 weeks discovery → filing
This filing is one of 12 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- bd_1719c1d7fddc8b28New Hampshire State AGfiled 2025-11-19Verified
- bd_b406afafefa33a19Maine State AGfiled 2025-11-19Verified
- bd_cb3366655b70e060Montana State AGfiled 2025-11-19Verified by operator
- bd_cf0ce5346c65cf8dWashington State AGfiled 2025-11-19Verified
Show 6 more filings ↓Show fewer ↑up to 26d gap
- bd_f6eee11cd806a2d8Vermont State AGfiled 2025-11-19Verified
- bd_c2275bbda62bc31bTexas State AGfiled 2025-11-21(2d gap)Verified by operator
- bd_31c871a13a7830fcTexas State AGfiled 2025-10-27(23d gap)Verified by operator
- bd_3954de5decc55d14Indiana State AGfiled 2025-10-24(26d gap)Verified
- bd_686937ac8f09c1a7Maine State AGfiled 2025-10-24(26d gap)Candidate
- bd_9cf4ddaaeb5ee73eVermont State AGfiled 2025-10-24(26d gap)Verified
Showing first 10 of 11 linked disclosures.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-614490
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 19, 2025
- Raw hash
- f7c427b087ef23acb9ebb5efd05764a86a82f984eabcb1a5dbd23d1ed85b4e18
Reporting entity
- Name
- Mehri & Skalet, PLLCnorm: mehri skalet
- Domain
- findjustice.com
Victim entity
- Name
- Mehri & Skalet, PLLCnorm: mehri skalet
- Domain
- findjustice.com
Incident
- Discovered
- May 20, 2025
- Materiality determined
- —
- Notification sent
- Nov 19, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported this event to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 weeks(183 days from discovery to filing)
- Compliance flags
- CA 60-day late · 183d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 20, 2025→ Notified: Nov 19, 2025183d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.