HackingFinancial ServicesFinanceCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Petersen International Underwriters

bd_94e7f906558bc4cd · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 20, 2021

Filed

Jul 6, 2022

To disclose

28 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for Petersen International Underwriters →

Petersen International Underwriters experienced a data security incident discovered on December 20, 2021, involving unauthorized access to a limited number of documents. Affected data may include names, Social Security numbers, and financial account numbers. The company took systems offline, engaged forensic experts, and offered identity theft protection services. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

California clockDiscovered Dec 20, 2021 → Notified Jul 6, 2022198d ✗ CA 60-day late28 weeks discovery → filing

Incident timeline

discovery → filing · 28 weeks / 198 days

Dec 20, 2021

Discovered

Jul 6, 2022

Filed

vs. sector median

+19 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_24a09469175a95dc2022-07-06Candidate
Montana State AGbd_709db379e6930db82022-07-06Verified
Indiana State AGbd_738411166d87abce2022-07-06Verified
Massachusetts State AGbd_de6367e474854da82022-07-13 · +7dVerified

Show 1 more filing ↓up to 71d gap

New Hampshire State AGbd_a4641bbf5861ae8a2022-09-15 · +71dVerified

Name: Petersen International Underwriters
norm: petersen international underwriters
Domain: piu.org

Name: Petersen International Underwriters
norm: petersen international underwriters
Domain: piu.org
Industry: Financial Servicesllm

Discovered: Dec 20, 2021
Materiality determined: —
Notification sent: Jul 6, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unknown
Threat actor: External

During the incident: Took the impacted systems offline
Took steps to secure our network
Engaged independent computer forensic experts to assist with our investigation
Conducted a review of these documents
Offering identity theft protection services through IDX
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 weeks(198 days from discovery to filing)
Compliance flags: CA 60-day late · 198d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Dec 20, 2021
→ Notified: Jul 6, 2022
198d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Dec 20, 2021 → Notified: Jul 6, 2022	198d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Maine State AGJul 6 · first

Montana State AGJul 6 · first

Indiana State AGJul 6 · first

California State AGJul 6 · first · this page

Massachusetts State AG+7d

New Hampshire State AG+71d

Pattern: first filing Jul 6 (ME), last Sep 15 (NH) — a 71-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-554988
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2022
Raw hash: cc8f86601bc8906727678c16e46f11e8d42ab725a067c8cb2d4e47776b1598cb

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityPetersen International Underwriters

Victim entityPetersen International Underwriters

Incidentdiscovered Dec 20, 2021

Stated responseTook the impacted systems offline

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov