HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Brown & Streza, LLP
bd_a3fdea8d506e3240 · schema v1 · pii pii-v1
Full breach record for Brown & Streza, LLP →Brown & Streza, LLP notified the California Attorney General of a data security incident discovered on January 18, 2023. An unknown external actor gained unauthorized access to the firm's network. The firm engaged independent cybersecurity experts and law enforcement. The investigation concluded that personal information, including names and other unspecified data, may have been acquired. Affected individuals were offered 12 months of complimentary identity protection services through Experian IdentityWorks.
California clockDiscovered Jan 18, 2023 → Notified May 12, 2023114d ✗ CA 60-day late16 weeks discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_0663a08426d27125Vermont State AGfiled 2023-05-12Verified
- bd_9cf9bf5bf5fe645cMontana State AGfiled 2023-05-12Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-566676
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 12, 2023
- Raw hash
- 63ebeebf0af1ac079b123cfb89c013964c2662aa7b45c7df79e1085a87c2f810
Reporting entity
- Name
- Brown Universitynorm: brown university
- Domain
- brown.edu
Victim entity
- Name
- Brown & Streza, LLPnorm: brown streza
- Domain
- brownandstreza.com
Incident
- Discovered
- Jan 18, 2023
- Materiality determined
- —
- Notification sent
- May 12, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Time to disclose
- 16 weeks(114 days from discovery to filing)
- Compliance flags
- CA 60-day late · 114d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 18, 2023→ Notified: May 12, 2023114d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.