HackingTechnologyInformationData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Financial accountLowContained

LCPtracker

bd_5fe6cef2935f0f9c · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 20, 2024

Filed

Dec 20, 2024

To disclose

17 weeks

Affected

Not disclosed

Linked

11 filings

Confidence

64%

Full breach record for LCPtracker →

LCPtracker, Inc. experienced unauthorized access to its online storage account environment between August 14 and August 20, 2024. The company became aware of the incident on August 20, 2024. An unauthorized actor accessed and acquired certain files and data. Affected individuals were notified via mail on December 20, 2024, and offered 12 months of credit monitoring and fraud assistance. The incident involved sensitive personal information, potentially including financial account data.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 17 weeks / 122 days

Aug 14, 2024

Begins

Aug 20, 2024

Discovered

Dec 20, 2024

Filed

vs. sector median

1 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

California State AGbd_4ac47077bd9ff2d32025-01-14 · +25dVerified
Massachusetts State AGbd_0180907d27863f622024-11-22 · +28dVerified
California State AGbd_07ceb60a4a6fe6c02024-11-22 · +28dCandidate
New Hampshire State AGbd_0e244ae40a6462c92024-11-22 · +28dVerified

Show 6 more filings ↓up to 49d gap

Washington State AGbd_34557b06fe467f712024-11-22 · +28dVerified
Montana State AGbd_4726fd00272b61e62024-11-22 · +28dVerified
Vermont State AGbd_520a0c887a11a2952024-11-22 · +28dVerified
Maine State AGbd_8fd5b2be60792c2f2024-11-22 · +28dVerified
Indiana State AGbd_f0bef15520af331e2024-11-22 · +28dVerified
Illinois State AGbd_f9f2519d3dbcab082024-11-01 · +49dVerified

Name: LCPtracker
norm: lcptracker
Domain: prod-cdn.lcptracker.net

Name: LCPtracker
norm: lcptracker
Domain: prod-cdn.lcptracker.net
Industry: Technologyllm

Discovered: Aug 20, 2024
Breach occurred: Aug 14, 2024 – Aug 20, 2024
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 20, 2024
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Filed notification with California Attorney General

During the incident: Engaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation
Conducted a comprehensive review of the impacted data to identify impacted individuals
Providing access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge for twelve (12) months
Providing proactive fraud assistance through Cyberscout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(122 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 9 states

View merged incident ↗

Illinois State AGNov 1 · first

Massachusetts State AG+21d

California State AG+21d

New Hampshire State AG+21d

Washington State AG+21d

Montana State AG+21d

Vermont State AG+21d

Maine State AG+21d

Indiana State AG+21d

California State AG+49d · this page

California State AG+74d

Pattern: first filing Nov 1 (IL), last Jan 14 (CA) — a 74-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-596512
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 20, 2024
Raw hash: 61b6bcdd249d6c8a106adc6dcf5e900c7abe5943cedf8eb679a8d1f2ae78ac74

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityLCPtracker

Victim entityLCPtracker

Incidentdiscovered Aug 20, 2024

Stated responseEngaged a specialized third-party cybersecurity firm to conduct a comprehensive investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov