HackingData ExfiltratedCustomer Data InvolvedPIIIDENTITY_GOVERNMENTHighContained
Lozano Smith
bd_ccdb4f2f9735e57e · schema v1 · pii pii-v1
Full breach record for Lozano Smith →Lozano Smith, a professional services firm based in Fresno, CA, reported an external system breach (hacking) occurring between January 1, 2020, and April 8, 2021. The incident was discovered on October 18, 2021, and affected a total of 21,437 individuals, including one Maine resident. The breach compromised names and Social Security Numbers. Lozano Smith provided written notification to affected individuals on December 14, 2021, and offered 12 months of identity theft protection services through IDX.
Maine clockDiscovered Oct 18, 2021 → Filed with AG Dec 14, 202157d ⏱ ME AG >30d8 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed21,437 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/78737c09-4a86-4032-81ba-74e5eb0f4c0d.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 14, 2021
- Raw hash
- b336c9468e0d4cd8d5966997d1ecd969a2daa39843c2c722d7738b9f2de7b9d3
Reporting entity
- Name
- Lozano Smithnorm: lozano smith
Victim entity
- Name
- Lozano Smithnorm: lozano smith
Incident
- Discovered
- Oct 18, 2021
- Materiality determined
- —
- Notification sent
- Dec 14, 2021
- Affected individuals
- 21,437
- Data types
- PIIIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 8 weeks(57 days from discovery to filing)
- Compliance flags
- ME AG >30d · 57d
- Discovery-date grounding
- AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Oct 18, 2021→ Filed with AG: Dec 14, 202157d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.