UnknownCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Davlyn Investments

bd_5e0b4edab54a138c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 25, 2023

Filed

Feb 21, 2024

To disclose

8 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for Davlyn Investments →

Davlyn Investments notified the California Attorney General of a data security incident. The breach occurred on November 30, 2023, and was discovered on December 25, 2023. The incident involved unauthorized access to names and Social Security numbers. Davlyn secured its network, engaged external cybersecurity experts, and offered complimentary credit monitoring and identity protection services to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Dec 25, 2023 → Notified Feb 14, 202451d ✓ CA 60-day OK8 weeks discovery → filing

Incident timeline

undetected · 25 days

discovery → filing · 8 weeks / 58 days

Nov 30, 2023

Begins

Dec 25, 2023

Discovered

Feb 21, 2024

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_0fdd985d0f8fa72f2024-02-16 · +5dVerified
Indiana State AGbd_bb72cb11076fba8d2024-02-14 · +7dVerified
Montana State AGbd_c7912a65c36a27152024-02-14 · +7dCandidate

Name: Davlyn Investments
norm: davlyn investments

Name: Davlyn Investments
norm: davlyn investments

Discovered: Dec 25, 2023
Breach occurred: Nov 30, 2023
Undetected for: 25 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 14, 2024
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown

During the incident: Took immediate steps to secure our network
Engaged a team of leading external cybersecurity experts to assist in our response and conduct an investigation
Implemented additional safeguards to help ensure the security of our network environment
Offering complimentary credit monitoring and identity protection services through IDX
Changes made: Implemented additional safeguards to help ensure the security of our network environment and to reduce the risk of a similar incident occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: CA 60-day OK · 51d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Dec 25, 2023
→ Notified: Feb 14, 2024
51d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Dec 25, 2023 → Notified: Feb 14, 2024	51d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGFeb 14 · first

Montana State AGFeb 14 · first

Massachusetts State AG+2d

California State AG+7d · this page

Pattern: first filing Feb 14 (IN), last Feb 21 (CA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-581276
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 21, 2024
Raw hash: 4b14814b0fb67c27087772ba1a9728c570539b2395e29d2b1ae6f7bf9e4a8838

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityDavlyn Investments

Victim entityDavlyn Investments

Incidentdiscovered Dec 25, 2023

Stated responseTook immediate steps to secure our network

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov