HackingCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHIHighContained
4 Over, LLC
bd_7d5df62085c055f5 · schema v1 · pii pii-v1
Full breach record for 4 Over, LLC →4 Over LLC notified California residents of unauthorized access to systems between Nov 16-19, 2022. Affected data included names, SSNs, bank account numbers, and health insurance information. 2,790 California residents were notified on Dec 4, 2023. The company engaged forensic specialists, notified law enforcement, and is providing 24 months of credit monitoring.
California clockDiscovered Nov 19, 2022 → Notified Dec 4, 2023380d ✗ CA 60-day late13 months discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_a47465e99a2ecdfcMontana State AGfiled 2023-12-04Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-577413
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 4, 2023
- Raw hash
- 8f2fdc9c6ddfefaf15a1bd88336827806afef7cf3d2fd85f6cd388d471931298
Reporting entity
- Name
- 4 Over, LLCnorm: 4 over
Victim entity
- Name
- 4 Over, LLCnorm: 4 over
Incident
- Discovered
- Nov 19, 2022
- Materiality determined
- —
- Notification sent
- Dec 4, 2023
- Affected individuals
- 2,790
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICPHI
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Regulator citations
- Notified federal law enforcementProviding written notice to relevant state regulators
Compliance
- Time to disclose
- 13 months(380 days from discovery to filing)
- Compliance flags
- CA 60-day late · 380d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 19, 2022→ Notified: Dec 4, 2023380d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.