cgm
bd_acd5ed6139e7a5a2 · schema v1 · pii pii-v1
Full breach record for cgm →CGM, Inc. notified the California Attorney General of a data breach affecting personal information. The incident occurred between December 15 and December 28, 2022, with unusual activity observed on December 28, 2022. An unknown external actor accessed the network. Affected data includes names and potentially Social Security numbers (implied by credit monitoring offer and standard PII scope, though letter says '<<data elements>>' and 'name'). CGM contained the threat, engaged third-party specialists, notified federal law enforcement, and is offering credit monitoring. The notice specifically mentions approximately 2,834 Rhode Island residents may be impacted.
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_2735fea22890668dWashington State AGfiled 2023-06-07Verified
- bd_a22f66366c758289Vermont State AGfiled 2023-06-07Verified
- bd_51a69c1950f8deadNew Hampshire State AGfiled 2023-06-12(5d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-567682
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 7, 2023
- Raw hash
- f7eb2ca852dbc10b32af5f84e040bade43ee63d7241cb878bac57c8259f48276
Reporting entity
- Name
- cgm
Victim entity
- Name
- cgm
Incident
- Discovered
- Dec 28, 2022
- Materiality determined
- —
- Notification sent
- Jun 7, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement of the eventNotifying relevant regulatory authorities, as required
Compliance
- Time to disclose
- 23 weeks(161 days from discovery to filing)
- Compliance flags
- CA 60-day late · 161dLeak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 28, 2022→ Notified: Jun 7, 2023161d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.