HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Keenan & Associates
bd_b81430bb11ab6638 · schema v1 · pii pii-v1
Full breach record for Keenan & Associates →Keenan & Associates, an insurance brokerage, experienced a cybersecurity incident between August 21 and August 27, 2023. An unauthorized party gained access to internal systems and exfiltrated personal information including names, SSNs, driver's license numbers, passport numbers, and health insurance information. The incident was discovered on August 27, 2023. Keenan engaged forensic experts, contained the incident, and notified law enforcement. Affected individuals are offered 24 months of identity protection.
California clockDiscovered Aug 27, 2023 → Notified Jan 26, 2024152d ✗ CA 60-day late14 months discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-593385
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 15, 2024
- Raw hash
- a6973d92e345852bd805c7d6f69a0b309977fa07956e86a513ffb3a8ba05e331
Reporting entity
- Name
- Keenan & Associatesnorm: keenan associates
Victim entity
- Name
- Keenan & Associatesnorm: keenan associates
Incident
- Discovered
- Aug 27, 2023
- Materiality determined
- —
- Notification sent
- Jan 26, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
- Regulator citations
- Notified law enforcementContinuing to support federal law enforcement’s investigation
Compliance
- Time to disclose
- 14 months(415 days from discovery to filing)
- Compliance flags
- CA 60-day late · 152d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Aug 27, 2023→ Notified: Jan 26, 2024152d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.