Mendes & Haney LLP
bd_8cc276bb2bc80240 · schema v1 · pii pii-v1
Full breach record for Mendes & Haney LLP →Mendes & Haney, LLP, a California law firm, disclosed a data breach involving unauthorized access to its network via Remote Desktop Protocol (RDP) from a foreign IP address between January 23, 2018, and February 26, 2018. The incident was discovered on February 28, 2018, following a rejected tax return. The breach exposed client PII, including SSNs, names, addresses, and financial/bank account information. The firm engaged forensic investigators, notified law enforcement (FBI, IRS, FTB), and offered credit monitoring and identity theft protection services to affected individuals.
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_136808e38160eb25Montana State AGfiled 2018-03-30(1d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-134895
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 29, 2018
- Raw hash
- a88fa3c14341ee955cbfafb36ce3f38ebcd9f20d81b2800c48903cbf65c481c0
Reporting entity
- Name
- Mendes & Haney LLPnorm: mendes haney
Victim entity
- Name
- Mendes & Haney LLPnorm: mendes haney
Incident
- Discovered
- Feb 28, 2018
- Materiality determined
- —
- Notification sent
- Mar 30, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBINotified the IRSNotified the FTBNotified all applicable state agencies
- Initial access
- external_remote_services
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 28, 2018→ Notified: Mar 30, 201830d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.