HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Capital Planning Advisors, LLC

bd_c7cc1caa775cfc08 · schema v1 · pii pii-v1

Severity

Low

Discovered

Aug 1, 2019

Filed

Nov 15, 2019

To disclose

15 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for Capital Planning Advisors, LLC →

Capital Planning Advisors, LLC reported unauthorized access to a single employee email account between July 30 and August 1, 2019. The incident involved potential exposure of personal information including names and contact details. The company engaged forensic experts, reset passwords, and offered one year of identity monitoring through Kroll. No misuse of data was confirmed.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

discovery → filing · 15 weeks / 105 days

Jul 30, 2019

Begins

Aug 1, 2019

Discovered

Nov 15, 2019

Filed

vs. sector median

+6 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_3a06e94eb303d05f2019-11-15Candidate

Name: Capital Planning Advisors, LLC
norm: capital planning advisors

Name: Capital Planning Advisors, LLC
norm: capital planning advisors
Industry: Financial Servicesllm

Discovered: Aug 1, 2019
Breach occurred: Jul 30, 2019 – Aug 1, 2019
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notifying relevant regulators

During the incident: Began an investigation with the assistance of third-party forensic experts
Resetting account passwords
Reviewing the contents of the email account to determine whether it contained protected information
Reviewing internal systems to identify contact information for purposes of providing notice
Notified law enforcement of this incident
Notifying relevant regulators
Offering access to identity monitoring services for one year through Kroll, at no cost
Changes made: Reviewing and enhancing existing policies and procedures to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(106 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGNov 15 · first

California State AGNov 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-184368
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 15, 2019
Raw hash: 4cf2e96f0c39823a71be2c8f207e20c05cf0244c834cc24e48a9af919a39b913

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityCapital Planning Advisors, LLC

Victim entityCapital Planning Advisors, LLC

Incidentdiscovered Aug 1, 2019

Stated responseBegan an investigation with the assistance of third-party forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov