HackingSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICLowContained
Quinn Emanuel Urquhart & Sullivan LLP
bd_c67ab365f1c59b80 · schema v1 · pii pii-v1
Full breach record for Quinn Emanuel Urquhart & Sullivan LLP →Quinn Emanuel Urquhart & Sullivan, LLP notified clients of a data breach involving an electronic discovery vendor. An unknown party accessed data in the vendor's data center between May 13-14, 2022. The firm engaged cybersecurity experts and law enforcement. Affected individuals were offered 24 months of credit monitoring.
California clockDiscovered May 14, 2022 → Notified Jul 20, 2023432d ✗ CA 60-day late14 months discovery → filing
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_5f4c536ac05ee94dMontana State AGfiled 2023-07-21Candidate
- bd_9ba79a48090d5b51Maine State AGfiled 2023-07-21Verified by operator
- bd_7164d7453d1eb79cNew Hampshire State AGfiled 2023-07-20(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-570642
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 21, 2023
- Raw hash
- 1559315ac5c569bcf1d210342716ae7d60f70a23b8544444961cd0724a38d86a
Reporting entity
- Name
- Quinn Emanuel Urquhart & Sullivan LLPnorm: quinn emanuel urquhart sullivan
Victim entity
- Name
- Quinn Emanuel Urquhart & Sullivan LLPnorm: quinn emanuel urquhart sullivan
Incident
- Discovered
- May 14, 2022
- Materiality determined
- —
- Notification sent
- Jul 20, 2023
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via electronic discovery vendor
- Initial access
- supply_chain
Compliance
- Time to disclose
- 14 months(433 days from discovery to filing)
- Compliance flags
- CA 60-day late · 432d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 14, 2022→ Notified: Jul 20, 2023432d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.