HackingProfessional ServicesProfessional ServicesVulnerability ExploitCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Ronald L Wolfe & Associates Inc.

bd_ce751188e258c3f1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 5, 2020

Filed

Apr 2, 2020

To disclose

28 days

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for Ronald L Wolfe & Associates Inc. →

Ronald L Wolfe & Associates Inc. disclosed a data breach affecting rental application data, including names, dates of birth, Social Security numbers, and driver's license numbers. The breach was discovered on March 5, 2020, when the Santa Barbara Police Department notified the company. The unauthorized access likely occurred up to six months prior. The attackers used 'strong-arm' tactics to breach the online database. The company changed passwords, reviewed logs, and offered one year of complimentary identity theft protection via NortonLifeLock.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 5, 2020 → Notified Mar 23, 202018d ✓ CA 60-day OK28 days discovery → filing

Incident timeline

undetected · 182 days

discovery → filing · 28 days

Sep 5, 2019

Begins

Mar 5, 2020

Discovered

Apr 2, 2020

Filed

vs. sector median

14 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_13048594cabaa5d52020-04-02Verified

Name: Ronald L Wolfe & Associates Inc.
norm: ronald l wolfe associates

Name: Ronald L Wolfe & Associates Inc.
norm: ronald l wolfe associates
Industry: Professional Servicesllm

Discovered: Mar 5, 2020
Breach occurred: Sep 5, 2019 – Mar 5, 2020
Undetected for: 182 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 23, 2020
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: Notified the Attorney General of the State of CaliforniaCooperating with Santa Barbara Police Department investigation
Initial access: exploit_public_facing

During the incident: Arranged for its information technology consultants to change passwords
Review logs for any information about the hackers’ operations
Notified the police of the status of our remediation
Notified the Attorney General of the State of California
Offered monitoring service with NortonLifeLock at no cost to you for a period of one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: CA 60-day OK · 18d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 5, 2020
→ Notified: Mar 23, 2020
18d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 5, 2020 → Notified: Mar 23, 2020	18d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGApr 2 · first

California State AGApr 2 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-188815
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 2, 2020
Raw hash: 6581ba7c1dae82326ac0660e769e90cf410a26aa55241e020a9cae2e8f1a32b7

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityRonald L Wolfe & Associates Inc.

Victim entityRonald L Wolfe & Associates Inc.

Incidentdiscovered Mar 5, 2020

Stated responseArranged for its information technology consultants to change passwords

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov