HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICLowContained
Dubroff, Easley, & Lovell LLP
bd_a2c042a9bbba7384 · schema v1 · pii pii-v1
Full breach record for Dubroff, Easley, & Lovell LLP →Dubroff, Easley & Lovell, LLP reported that an unauthorized actor gained access to its systems between September 2 and September 22, 2025. The firm discovered the incident on September 22, 2025, and determined on March 3, 2026, that personal data may have been compromised. The firm engaged outside cybersecurity professionals, secured systems, and is offering identity monitoring through Kroll.
California clockDiscovered Sep 22, 2025 → Notified Mar 3, 2026162d ✗ CA 60-day late14 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-620783
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 1, 2026
- Raw hash
- d44927c7edd4d57a0983d7d5f357f926a932001d18d034759d036f73f949ec8a
Reporting entity
- Name
- Dubroff, Easley, & Lovell LLPnorm: dubroff easley lovell
- Domain
- dubrofflaw.com
Victim entity
- Name
- Dubroff, Easley, & Lovell LLPnorm: dubroff easley lovell
- Domain
- dubrofflaw.com
Incident
- Discovered
- Sep 22, 2025
- Materiality determined
- —
- Notification sent
- Mar 3, 2026
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 14 weeks(101 days from discovery to filing)
- Compliance flags
- CA 60-day late · 162dCA AG copy ≤15d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Sep 22, 2025→ Notified: Mar 3, 2026162d 60 days (analyst band, pre-2026 discoveries) CA 60-day late California Consumers notified: Mar 3, 2026→ AG copy submitted: Jan 1, 2026— 15 calendar days CA AG copy ≤15d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.