HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
IRA Financial Trust
bd_88691053e8a94938 · schema v1 · pii pii-v1
Full breach record for IRA Financial Trust →IRA Financial Trust notified California AG that unauthorized actors accessed customer cryptocurrency wallets (Gemini) between Feb 2-25, 2022. The incident involved unauthorized cryptocurrency withdrawals and potential access to names, emails, phone numbers, SSNs, and financial account data. The company engaged forensic specialists, secured systems, changed passwords, and offered 12 months of identity theft protection.
California clockDiscovered Feb 8, 2022 → Notified Feb 8, 20220d ✓ CA 60-day OK8 weeks discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_ccb7f71d9109750bCalifornia State AGfiled 2022-03-30(6d gap)Verified
- bd_78802c77f31b048eMontana State AGfiled 2022-03-10(26d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-552322
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 5, 2022
- Raw hash
- 38dd6415a1b9fcf809d8cd2095f7b2dbcbc0f7b0e396818a44e0d28ab840e502
Reporting entity
- Name
- IRA Financial Trustnorm: ira financial
Victim entity
- Name
- IRA Financial Trustnorm: ira financial
Incident
- Discovered
- Feb 8, 2022
- Materiality determined
- —
- Notification sent
- Feb 8, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 weeks(56 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 8, 2022→ Notified: Feb 8, 20220d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.