HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountCredentialsMediumContained

ROSENTHAL COLLINS GROUP, L.L.C.

bd_b3edd60ba0755722 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 27, 2012

Filed

Jan 2, 2013

To disclose

5 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for ROSENTHAL COLLINS GROUP, L.L.C. →

Rosenthal Collins Group, LLC detected unauthorized access to a web application containing customer personal information, including names, addresses, birth dates, SSNs, financial ranges, bank names, and passwords. The incident occurred late November 26, 2012, and was discovered on November 27, 2012. Access was immediately terminated. The company is offering one year of credit monitoring to affected customers.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 27, 2012 → Notified Dec 3, 20126d ✓ CA 60-day OK5 weeks discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 5 weeks / 36 days

Nov 26, 2012

Begins

Nov 27, 2012

Discovered

Jan 2, 2013

Filed

vs. sector median

3 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_589b5e301ec96a692012-12-24 · +9dVerified

Name: ROSENTHAL COLLINS GROUP, L.L.C.
norm: rosenthal collins
Domain: rcgdirect.com

Name: ROSENTHAL COLLINS GROUP, L.L.C.
norm: rosenthal collins
Domain: rcgdirect.com
Industry: Financial Servicesllm

Discovered: Nov 27, 2012
Breach occurred: Nov 26, 2012 – Nov 27, 2012
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Dec 3, 2012
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountCredentials
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Working with law enforcement

During the incident: Access to the web application was shut down immediately
The unauthorized access was terminated
RCG conducted an internal investigation
Working with law enforcement and security professionals to identify the person(s) responsible
Offering a complimentary one-year membership in ProtectMyID Alert service by Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(36 days from discovery to filing)
Compliance flags: CA 60-day OK · 6d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 27, 2012
→ Notified: Dec 3, 2012
6d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 27, 2012 → Notified: Dec 3, 2012	6d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGDec 24 · first

California State AG+9d · this page

Pattern: first filing Dec 24 (NH), last Jan 2 (CA) — a 9-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-37692
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 2, 2013
Raw hash: af031158ffe06b184b39dc333dcc7e7691f5f4a9156aa12a55bd06c6f46ee1b5

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityROSENTHAL COLLINS GROUP, L.L.C.

Victim entityROSENTHAL COLLINS GROUP, L.L.C.

Incidentdiscovered Nov 27, 2012

Stated responseAccess to the web application was shut down immediately

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov