HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Stevens & Lee, P.C.
bd_6f048ed8e6069b6d · schema v1 · pii pii-v1
Full breach record for Stevens & Lee, P.C. →Stevens & Lee, a law firm assisting financial institutions, discovered a sophisticated cyber-attack on June 28, 2021. The investigation revealed that files containing personal information (names and potentially other data) of customers and clients' customers may have been accessed. The firm reported the incident to law enforcement and is offering 24 months of credit and identity monitoring through IDX. No evidence of misuse was found.
California clockDiscovered Jun 28, 2021 → Notified Apr 7, 2022283d ✗ CA 60-day late41 weeks discovery → filing
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_2a5004aeb0b0d85eWashington State AGfiled 2022-04-08Verified
- bd_4656c94467fb53f8New Hampshire State AGfiled 2022-04-08Verified
- bd_9e8a88c402d7b574Montana State AGfiled 2022-04-07(1d gap)Verified
- bd_3ca4b4db5aeb36fcMaine State AGfiled 2022-04-11(3d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 101d gap
- bd_c7efad509311ce92Maine State AGfiled 2021-12-30(99d gap)Verified
- bd_94e9b15529337432Maine State AGfiled 2021-12-28(101d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-552398
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 8, 2022
- Raw hash
- 54f2260881ce2294c36147b8051ebeeb00ed391796f665d84d6862cfd8718436
Reporting entity
- Name
- Stevens & Lee, P.C.norm: stevens lee
Victim entity
- Name
- Stevens & Lee, P.C.norm: stevens lee
Incident
- Discovered
- Jun 28, 2021
- Materiality determined
- —
- Notification sent
- Apr 7, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 41 weeks(284 days from discovery to filing)
- Compliance flags
- CA 60-day late · 283d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 28, 2021→ Notified: Apr 7, 2022283d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.