HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

Hamill & Kaplan, LLP

bd_9eeeca204cf281aa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 19, 2025

Filed

Aug 6, 2026

To disclose

46 weeks

Affected

Not disclosed

Linked

3 filings

Confidence

64%

Full breach record for Hamill & Kaplan, LLP →

Hamill & Kaplan, LLP notified clients of a data breach discovered on September 19, 2025, where an unauthorized user accessed their network. Affected data may include Social Security numbers, government IDs, names, and bank account information. The firm engaged third-party IT specialists, secured the network, and notified the FBI, IRS, Franchise Tax Board, and Secret Service. No specific count of affected individuals was disclosed.

J jump to incidentP pin to compareR raw source

California clockDiscovered Sep 19, 2025 → Notified Aug 3, 2026318d ✗ CA 60-day late46 weeks discovery → filing

Incident timeline

discovery → filing · 46 weeks / 321 days

Sep 19, 2025

Begins

Sep 19, 2025

Discovered

Aug 6, 2026

Filed

vs. sector median

+26 wks slower

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Nebraska State AGbd_905af269c9b1b4312026-08-03 · +3dVerified
New Hampshire State AGbd_d36977b8d853a8152026-08-13 · +7dVerified by operator

Name: Hamill & Kaplan, LLP
norm: hamill kaplan

Name: Hamill & Kaplan, LLP
norm: hamill kaplan
Industry: Professional Servicesllm

Discovered: Sep 19, 2025
Breach occurred: Sep 19, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 3, 2026
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial account
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the FBI, IRS, Franchise Tax Board, and Secret Service

During the incident: Took measures to ensure our network was secure
Began an investigation with the assistance of third-party IT specialists
Hired a third party to perform a thorough review of our systems
Continue our work with outside cybersecurity experts to reinforce our systems and security protocols
Notified the FBI, IRS, Franchise Tax Board, and Secret Service of this incident
Changes made: Reinforce our systems and security protocols in an effort to prevent incidents from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 46 weeks(321 days from discovery to filing)
Compliance flags: CA 60-day late · 318dCA AG copy ≤15d · 3d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Sep 19, 2025
→ Notified: Aug 3, 2026
318d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
California
Consumers notified: Aug 3, 2026
→ AG copy submitted: Aug 6, 2026
3d 15 calendar days CA AG copy ≤15d

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Sep 19, 2025 → Notified: Aug 3, 2026	318d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late
California	Consumers notified: Aug 3, 2026 → AG copy submitted: Aug 6, 2026	3d	15 calendar days	CA AG copy ≤15d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Nebraska State AGAug 3 · first

California State AG+3d · this page

New Hampshire State AG+10d

Pattern: first filing Aug 3 (NE), last Aug 13 (NH) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-627843
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 6, 2026
Raw hash: c564ed3cf54856d290ca4d58391eedd8ab161765c1bd50ac303e7b12e778ea82

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityHamill & Kaplan, LLP

Victim entityHamill & Kaplan, LLP

Incidentdiscovered Sep 19, 2025

Stated responseTook measures to ensure our network was secure

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov