HackingCustomer Data InvolvedIDENTITY_BASICLowContained
The Cannon Corporation
bd_ce1fa2f5343ac702 · schema v1 · pii pii-v1
Full breach record for The Cannon Corporation →The Cannon Corporation (dba CannonDesign) reported that an unauthorized third party gained access to certain parts of its network between January 19, 2023, and January 25, 2023. The company became aware of suspicious activity on January 25, 2023. The investigation determined that names and other personal information were accessed. The company is offering 24 months of credit monitoring through Experian.
California clockDiscovered Jan 25, 2023 → Notified Aug 19, 2024572d ✗ CA 60-day late19 months discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_254fc6798c6e3f3aMontana State AGfiled 2024-08-19Candidate
- bd_47c8afecbf0e0a57Vermont State AGfiled 2024-08-19Verified
- bd_6075ef2eac55c60aNew Hampshire State AGfiled 2024-08-19Candidate
- bd_5e25aa73e9170528New Hampshire State AGfiled 2024-09-16(28d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-590429
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 19, 2024
- Raw hash
- 1862668db9bdba4ab22345f27be95f6a54da86f9927778268bb4c75f1177c4db
Reporting entity
- Name
- The Cannon Corporationnorm: the cannon
- Domain
- cannondesign.com
Victim entity
- Name
- The Cannon Corporationnorm: the cannon
- Domain
- cannondesign.com
Incident
- Discovered
- Jan 25, 2023
- Materiality determined
- —
- Notification sent
- Aug 19, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notifying state regulators, as required
Compliance
- Time to disclose
- 19 months(572 days from discovery to filing)
- Compliance flags
- CA 60-day late · 572dLeak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 25, 2023→ Notified: Aug 19, 2024572d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.