Mark Thomas
bd_d4dea20565b11d2c · schema v1 · pii pii-v1
Full breach record for Mark Thomas →Mark Thomas notified the California Attorney General of a data security incident where an unauthorized actor accessed systems from October 11-19, 2024. The organization became aware of the potential unauthorized access on October 19, 2024. A forensic investigation and manual document review concluded on February 19, 2025, that personal information was included in the impacted data. The incident involved potential viewing and/or obtaining of files containing personal information. The organization engaged external cybersecurity professionals, secured systems, and is offering 12 months of complimentary credit monitoring to affected individuals.
Linked disclosures
Why this link?Ransomware claims (1)
- bd_c2aaa036ce369266Leak Sitelynxfiled 2024-10-15(153d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_0cf5b6183c2f8305Maryland State AGfiled 2025-03-17Verified
- bd_3504e41c57bc3b57Montana State AGfiled 2025-03-17Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-600030
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 17, 2025
- Raw hash
- 63d807acbf3b0536a919ff7374195576711663ed330e8b70eeb82f0c1ad65346
Reporting entity
- Name
- Mark Thomasnorm: mark thomas
Victim entity
- Name
- Mark Thomasnorm: mark thomas
Incident
- Discovered
- Oct 19, 2024
- Materiality determined
- —
- Notification sent
- Mar 17, 2025
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 21 weeks(149 days from discovery to filing)
- Compliance flags
- CA 60-day late · 149dLeak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Oct 19, 2024→ Notified: Mar 17, 2025149d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.