HackingProfessional ServicesProfessional ServicesStolen CredentialsCapture Stored DataData ExfiltratedTargetedPIIIdentity (basic)Government IDHighContained

Gunster, Yoakley, & Stewart, PA

bd_a3b412bcc9b03adc · schema v1 · pii pii-v1

Severity

High

Discovered

Nov 27, 2022

Filed

Aug 1, 2024

To disclose

20 months

Affected

3,358state residents only

Linked

5 filings

Confidence

64%

Full breach record for Gunster, Yoakley, & Stewart, PA →7 incidents on file

Gunster, Yoakley & Stewart, PA notified individuals of unauthorized access to its document management file system. Unauthorized access occurred over weeks leading up to discovery on November 27, 2022. Files contained PII including names and government IDs. Notifications began in April 2023. Kroll identity monitoring provided for 12 months.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due20 months discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 26 days

discovery → filing · 20 months / 613 days

Nov 1, 2022

Begins

Nov 27, 2022

Discovered

Aug 1, 2024

Filed

vs. sector median

+69 wks slower

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

California State AGbd_78b60ff13445b0ec2023-12-04 · +241dVerified
Washington State AGbd_c61ec90b1a7d4d8d2023-12-04 · +241dVerified
Montana State AGbd_87b5af26203b089e2023-08-04 · +363dCandidate
New Hampshire State AGbd_e920547675f271aa2023-08-04 · +363dVerified

Name: Gunster, Yoakley, & Stewart, PA
norm: gunster yoakley stewart
Domain: gunster.com

Name: Gunster, Yoakley, & Stewart, PA
norm: gunster yoakley stewart
Domain: gunster.com
Industry: Professional Servicesllm

Discovered: Nov 27, 2022
Breach occurred: Nov 1, 2022 – Nov 27, 2022
Undetected for: 26 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 1, 2023
Affected individuals: 3,358state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement
Initial access: valid_credentials

During the incident: Took measures to contain the incident and securely restore our network
Conducted a thorough investigation with the assistance of firms
Notified federal law enforcement
Secured the services of Kroll to provide identity monitoring
Implemented additional measures to further strengthen the security of its network
Changes made: Implemented additional measures to further strengthen the security of its network
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 20 months(613 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Montana State AGAug 4 · first

New Hampshire State AGAug 4 · first

California State AG+122d

Washington State AG+122d

South Carolina State AG+363d · this page

Pattern: first filing Aug 4 (MT), last Aug 1 (SC) — a 363-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Security%20Breach%20Notices/2024/GunsterYoakley%26StewartPA.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2024
Raw hash: 66e4432f59debb23860cf30f1c81e0b615535dbac50b8f1456b7774a899b05be

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityGunster, Yoakley, & Stewart, PA

Victim entityGunster, Yoakley, & Stewart, PA

Incidentdiscovered Nov 27, 2022

Stated responseTook measures to contain the incident and securely restore our network

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov