HackingCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountHealth (basic)PHIHighContained

4 Over, LLC

bd_7d5df62085c055f5 · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 19, 2022

Filed

Dec 4, 2023

To disclose

13 months

Affected

2,790state residents only

Linked

3 filings

Confidence

66%

Full breach record for 4 Over, LLC →

4 Over LLC notified California residents of unauthorized access to systems between Nov 16-19, 2022. Affected data included names, SSNs, bank account numbers, and health insurance information. 2,790 California residents were notified on Dec 4, 2023. The company engaged forensic specialists, notified law enforcement, and is providing 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 19, 2022 → Notified Dec 4, 2023380d ✗ CA 60-day late13 months discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 13 months / 380 days

Nov 16, 2022

Begins

Nov 19, 2022

Discovered

Dec 4, 2023

Filed

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_a47465e99a2ecdfc2023-12-04Verified
Massachusetts State AGbd_bc4cd8e05770742c2023-12-04Verified

Name: 4 Over, LLC
norm: 4 over

Name: 4 Over, LLC
norm: 4 over

Discovered: Nov 19, 2022
Breach occurred: Nov 16, 2022 – Nov 19, 2022
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 4, 2023
Affected individuals: 2,790state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)PHI
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Regulator citations: Notified federal law enforcementProviding written notice to relevant state regulators

During the incident: Launched an investigation with the assistance of third-party computer forensic specialists
Notified federal law enforcement regarding the event
Providing access to credit monitoring services for twenty-four months, through Kroll
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state regulators
Providing written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Worked to implement additional safeguards and training to its employees
Reviewing policies, procedures and processes related to the storage and access of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(380 days from discovery to filing)
Compliance flags: CA 60-day late · 380d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 19, 2022
→ Notified: Dec 4, 2023
380d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 19, 2022 → Notified: Dec 4, 2023	380d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGDec 4 · first

Massachusetts State AGDec 4 · first

California State AGDec 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-577413
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 4, 2023
Raw hash: 8f2fdc9c6ddfefaf15a1bd88336827806afef7cf3d2fd85f6cd388d471931298

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entity4 Over, LLC

Victim entity4 Over, LLC

Incidentdiscovered Nov 19, 2022

Stated responseLaunched an investigation with the assistance of third-party computer forensic specialists

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov