HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Promises2Kids
bd_90b673f0ca9009cb · schema v1 · pii pii-v1
Full breach record for Promises2Kids →Promises2Kids notified the California Attorney General of a data security incident. The organization discovered unauthorized access to its computer network in September 2024. A forensic investigation determined that certain data, including names and potentially Social Security numbers (inferred from credit monitoring offer), may have been accessed. The incident is contained. No specific count of affected individuals was disclosed in the filing summary, but notices were mailed to impacted individuals.
California clockDiscovered Sep 1, 2024 → Notified May 12, 2025253d ✗ CA 60-day late37 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_239eff5e8e1dc7c3New Hampshire State AGfiled 2025-05-16Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-602823
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2025
- Raw hash
- 17431b87a6ab8668fd3ea993a8515e0678738f7e61fb021dd144c7effb41e1db
Reporting entity
- Name
- Promises2Kidsnorm: promises2kids
- Domain
- promises2kids.org
Victim entity
- Name
- Promises2Kidsnorm: promises2kids
- Domain
- promises2kids.org
Incident
- Discovered
- Sep 1, 2024
- Materiality determined
- —
- Notification sent
- May 12, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 37 weeks(257 days from discovery to filing)
- Compliance flags
- CA 60-day late · 253dLeak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 1, 2024→ Notified: May 12, 2025253d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.