HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
CCI Financial, Inc.
bd_85083522045ce71b · schema v1 · pii pii-v1
Full breach record for CCI Financial, Inc. →CCI Financial, Inc. notified California residents of a cybersecurity incident where unauthorized access occurred on March 21, 2025, and was discovered on April 3, 2025. The attacker accessed and potentially removed files containing personal information. The company secured its network, engaged forensic professionals, and is offering complimentary identity monitoring services through Kroll.
California clockDiscovered Apr 3, 2025 → Notified Sep 10, 2025160d ✗ CA 60-day late23 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-608412
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 10, 2025
- Raw hash
- bad7ced8701333e5da3c2f87e9d082ed0f5ab673f4389d2ec221e6298337a67c
Reporting entity
- Name
- CCI Financial, Inc.norm: cci financial
Victim entity
- Name
- CCI Financial, Inc.norm: cci financial
Incident
- Discovered
- Apr 3, 2025
- Materiality determined
- —
- Notification sent
- Sep 10, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Time to disclose
- 23 weeks(160 days from discovery to filing)
- Compliance flags
- CA 60-day late · 160d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 3, 2025→ Notified: Sep 10, 2025160d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.