RKA Consulting Group
bd_93a0dacd8d6680e2 · schema v1 · pii pii-v1
Full breach record for RKA Consulting Group →RKA Consulting Group notified the California Attorney General of a data security incident. On January 8, 2025, the company discovered suspicious activity and disconnected affected systems. An investigation determined that an unauthorized individual gained access to systems for a limited period. The incident potentially impacted names, dates of birth, and Social Security numbers of individuals who worked with RKA Consulting on engineering projects. The company engaged forensic experts, changed passwords, implemented network access restrictions, and is providing 12 months of credit monitoring and fraud assistance services via Cyberscout.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-613418
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 27, 2025
- Raw hash
- 5f0fb2714cb0bda9b8f96134361eb6ee4324dd24f233b8a9838d4c91ba02d4aa
Reporting entity
- Name
- RKA Consulting Groupnorm: rka consulting
- Domain
- rkagroup.com
Victim entity
- Name
- RKA Consulting Groupnorm: rka consulting
- Domain
- rkagroup.com
Incident
- Discovered
- Jan 8, 2025
- Materiality determined
- —
- Notification sent
- Oct 27, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 42 weeks(292 days from discovery to filing)
- Compliance flags
- CA 60-day late · 292d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 8, 2025→ Notified: Oct 27, 2025292d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.