HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Surplus Line Association of California website.
bd_9c23b70908e90f47 · schema v1 · pii pii-v1
Full breach record for Surplus Line Association of California website. →Surplus Line Association of California notified the California AG of a data breach where unauthorized access occurred on April 4, 2026. The organization became aware of suspicious activity on April 14, 2026. A review on June 15, 2026, confirmed that names and Social Security numbers were accessed. The company engaged cybersecurity specialists, notified the FBI and CA Department of Insurance, and is offering credit monitoring.
California clockDiscovered Apr 14, 2026 → Notified Jul 13, 202690d ✗ CA 30-day late13 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_bffc794e981a955dVermont State AGfiled 2026-07-14(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-626446
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 13, 2026
- Raw hash
- 8e3ba347777529a925c74c81f524d9bbaf46c3e25d28e6c288ac3c6c4c44b7fc
Reporting entity
- Name
- Surplus Line Association of California website.norm: surplus line association of california website
- Domain
- slacal.com
Victim entity
- Name
- Surplus Line Association of California website.norm: surplus line association of california website
- Domain
- slacal.com
Incident
- Discovered
- Apr 14, 2026
- Materiality determined
- —
- Notification sent
- Jul 13, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the California Department of InsuranceNotified the Federal Bureau of Investigation
Compliance
- Time to disclose
- 13 weeks(90 days from discovery to filing)
- Compliance flags
- CA 30-day late · 90dCA AG copy ≤15d · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 14, 2026→ Notified: Jul 13, 202690d 30 calendar days CA 30-day late California Consumers notified: Jul 13, 2026→ AG copy submitted: Jul 13, 20260d 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.