Social EngineeringPhishingBECEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENTMediumContained
LAZ Karp Associates, LLC
bd_9f7295cdbf0a3ad7 · schema v1 · pii pii-v1
Full breach record for LAZ Karp Associates, LLC →Laz Karp Associates, LLC (doing business as LAZ Parking) experienced a business email compromise incident on February 17, 2016. An unknown individual impersonated an executive via email, tricking an employee into sending 2015 Form W-2s for employees. Affected data included names, addresses, Social Security numbers, and compensation data. The company notified affected employees on March 9, 2016, and offered 24 months of identity protection services.
California clockDiscovered Feb 17, 2016 → Notified Mar 9, 201621d ✓ CA 60-day OK5 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_2edae37bec95d72cNew Hampshire State AGfiled 2016-03-17(4d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-60586
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 21, 2016
- Raw hash
- deeb3246fa6b56556a24267ff4f35d66d1446babbde2aad8d36ab346056a1baa
Reporting entity
- Name
- LAZ Karp Associates, LLCnorm: laz karp associates
Victim entity
- Name
- LAZ Karp Associates, LLCnorm: laz karp associates
Incident
- Discovered
- Feb 17, 2016
- Materiality determined
- —
- Notification sent
- Mar 9, 2016
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTEMPLOYMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the matter to law enforcement
- Initial access
- phishing_link
Compliance
- Time to disclose
- 5 weeks(33 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 21d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 17, 2016→ Notified: Mar 9, 201621d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.