HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
BMS HOLDINGS III CORP.
bd_8ec0e44091ebee77 · schema v1 · pii pii-v1
Full breach record for BMS HOLDINGS III CORP. →BMS Holdings, LP notified the California Attorney General of an incident where an unauthorized actor accessed its network between February 5 and February 24, 2025, and copied files. The company became aware of suspicious activity on February 24, 2025. Affected data includes names and other personal information. The company enhanced security protocols and is offering credit monitoring.
California clockDiscovered Feb 24, 2025 → Notified Jun 23, 2025119d ✗ CA 60-day late17 weeks discovery → filing
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_0564395ec81c4afcNew Hampshire State AGfiled 2025-06-23Verified
- bd_2eea22c4026b14c6Indiana State AGfiled 2025-06-23Verified
- bd_9e1cde324f44f781Vermont State AGfiled 2025-06-23Verified
- bd_eb67f220381d7775Montana State AGfiled 2025-06-23Candidate
Show 1 more filing ↓Show fewer ↑up to 7d gap
- bd_0b1e7eb0d279c6a9Texas State AGfiled 2025-06-30(7d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-604404
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 23, 2025
- Raw hash
- b54417a97bea5292231b3ab2626b7b3514c18770a9cd56e6bffa76386f244b39
Reporting entity
- Name
- BMS HOLDINGS III CORP.norm: bms holdings iii
Victim entity
- Name
- BMS HOLDINGS III CORP.norm: bms holdings iii
Incident
- Discovered
- Feb 24, 2025
- Materiality determined
- —
- Notification sent
- Jun 23, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 17 weeks(119 days from discovery to filing)
- Compliance flags
- CA 60-day late · 119d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 24, 2025→ Notified: Jun 23, 2025119d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.