NALS Apartment Homes LLC
bd_7ea7320ea495e6f1 · schema v1 · pii pii-v1
Full breach record for NALS Apartment Homes LLC →NALS Apartment Homes LLC experienced unauthorized access to its network on or before December 2, 2023. The company became aware of suspicious activity on that date and immediately shut down system access. An investigation determined that an unauthorized actor acquired certain files and folders. Affected data includes names and potentially tax identification numbers or other personal information. The company engaged third-party professionals, notified law enforcement, and is offering 24 months of identity monitoring through Kroll. Remediation efforts include reviewing policies and implementing additional safeguards.
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_7b077f3680846ba3Montana State AGfiled 2024-03-05Candidate
- bd_9c12ebdec61788b7New Hampshire State AGfiled 2024-03-05Verified
- bd_b7fa2d10ecb1b9f9Maine State AGfiled 2024-03-05Candidate
- bd_d5e700781218708fVermont State AGfiled 2024-03-05Verified
Show 1 more filing ↓Show fewer ↑
- bd_e1f8a69ef8b6e9faIndiana State AGfiled 2024-03-05Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-581959
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 5, 2024
- Raw hash
- 92b72ba22dcb5a48423d198ab3eea8bf4e5d354e23dab2ec7c43f085d3e3ca73
Reporting entity
- Name
- NALS Apartment Homes LLCnorm: nals apartment homes
- Domain
- nals.com
Victim entity
- Name
- NALS Apartment Homes LLCnorm: nals apartment homes
- Domain
- nals.com
Incident
- Discovered
- Dec 2, 2023
- Materiality determined
- —
- Notification sent
- Feb 16, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 13 weeks(94 days from discovery to filing)
- Compliance flags
- CA 60-day late · 76d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 2, 2023→ Notified: Feb 16, 202476d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.