HackingStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICLowContained
KMJ Corbin & Company LLP
bd_d1b93880a084c2e8 · schema v1 · pii pii-v1
Full breach record for KMJ Corbin & Company LLP →KMJ Corbin & Company LLP notified clients of a data breach after discovering unauthorized access to employee email accounts on October 22, 2021. An investigation by forensic professionals determined that an external unauthorized person accessed certain employee email accounts. It is possible that personal information contained in emails or attachments was viewed or acquired. The firm reset passwords, engaged forensics, and offered identity theft protection services.
California clockDiscovered Oct 22, 2021 → Notified Jul 13, 2022264d ✗ CA 60-day late38 weeks discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_bf8c0347da99c724Montana State AGfiled 2022-07-14(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-555258
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 13, 2022
- Raw hash
- 9a57a6a34273139808891be831009b84ce12dae711d0fc6bd9e5d5df7e8cf7d9
Reporting entity
- Name
- KMJ Corbin & Company LLPnorm: kmj corbin
Victim entity
- Name
- KMJ Corbin & Company LLPnorm: kmj corbin
Incident
- Discovered
- Oct 22, 2021
- Materiality determined
- —
- Notification sent
- Jul 13, 2022
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Reported the incident to law enforcement
Compliance
- Time to disclose
- 38 weeks(264 days from discovery to filing)
- Compliance flags
- CA 60-day late · 264d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 22, 2021→ Notified: Jul 13, 2022264d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.