HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

Aldrich Services LLP

bd_bcccefe40cc7dd06 · schema v1 · pii pii-v2

Severity

Low

Discovered

—

Filed

Oct 1, 2026

To disclose

—

Affected

Not disclosed

Linked

4 filings

Confidence

69%

Full breach record for Aldrich Services LLP →4 incidents on file

Aldrich Services LLP notified the California Attorney General of unauthorized access to an employee email account between August 22-23, 2026. An unknown individual accessed the account, potentially exposing names and other personal information of affected individuals. The company secured the account, investigated the incident, and offered credit monitoring. No specific count of affected individuals was disclosed in the filing, though Rhode Island residents were noted.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 22, 2026

Begins

Oct 1, 2026

Filed

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_0048f7cce8a67d3d2026-10-01Verified
Massachusetts State AGbd_977c023dab01aa0a2026-10-01Verified
Oregon State AGbd_349159046bd467c62026-10-21 · +20dVerified

Name: Aldrich Services LLP
norm: aldrich services

Name: Aldrich Services LLP
norm: aldrich services
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Aug 22, 2026 – Aug 23, 2026
Materiality determined: —
Notification sent: Oct 1, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified relevant regulatory authorities
Initial access: valid_credentials

During the incident: Secured the affected employee email account
Confirmed the security of the email environment
Conducted a comprehensive investigation
Performed a diligent review of potentially impacted data
Notified law enforcement and relevant regulatory authorities
Offering complimentary access to credit monitoring services through Experian
Changes made: Reviewing and enhancing existing policies and procedures to limit the likelihood of recurrence
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGOct 1 · first

Massachusetts State AGOct 1 · first

California State AGOct 1 · first · this page

Oregon State AG+20d

Pattern: first filing Oct 1 (NH), last Oct 21 (OR) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-630682
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2026
Raw hash: 47bca39aeb140889808cfa2ecff9da307af60bda3108c958ef1fb87020ddafcd

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityAldrich Services LLP

Victim entityAldrich Services LLP

IncidentUnauthorized Access

Stated responseSecured the affected employee email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov