HackingCustomer Data InvolvedData ExfiltratedPIIIdentity (basic)LowContained

Mark Thomas

bd_d4dea20565b11d2c · schema v1 · pii pii-v1

Severity

Low

Discovered

Oct 19, 2024

Filed

Mar 17, 2025

To disclose

21 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

65%

Full breach record for Mark Thomas →

Mark Thomas notified the California Attorney General of a data security incident where an unauthorized actor accessed systems from October 11-19, 2024. The organization became aware of the potential unauthorized access on October 19, 2024. A forensic investigation and manual document review concluded on February 19, 2025, that personal information was included in the impacted data. The incident involved potential viewing and/or obtaining of files containing personal information. The organization engaged external cybersecurity professionals, secured systems, and is offering 12 months of complimentary credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 19, 2024 → Notified Mar 17, 2025149d ✗ CA 60-day late21 weeks discovery → filing

Incident timeline

undetected · 8 days

discovery → filing · 21 weeks / 149 days

Oct 11, 2024

Begins

Oct 19, 2024

Discovered

Mar 17, 2025

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelynxbd_c2aaa036ce3692662024-10-15 · +153dVerified by operator

Regulatory filings (4) · sorted by filing gap

Maryland State AGbd_0cf5b6183c2f83052025-03-17Verified
Montana State AGbd_3504e41c57bc3b572025-03-17Verified
Massachusetts State AGbd_44ccc14ac59b80ca2025-03-17Verified by operator
Maine State AGbd_d7721e107d361a8c2025-03-17Verified

Name: Mark Thomas
norm: mark thomas

Name: Mark Thomas
norm: mark thomas

Discovered: Oct 19, 2024
Breach occurred: Oct 11, 2024 – Oct 19, 2024
Undetected for: 8 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 17, 2025
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Took steps to ensure the security of our systems
Commenced a prompt and thorough investigation
Worked very closely with external cybersecurity professionals experienced in handling these types of situations to assist us in determining the full extent of the incident and the scope of any data impacted
Conducted an extensive forensic investigation and manual document review
Offering a complimentary 12 months membership for credit monitoring
Set up a dedicated, confidential toll-free response line to respond to questions
Changes made: Continually evaluate and modify our practices and internal controls to enhance the security and privacy of your personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(149 days from discovery to filing)
Compliance flags: CA 60-day late · 149dLeak >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 19, 2024
→ Notified: Mar 17, 2025
149d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 19, 2024 → Notified: Mar 17, 2025	149d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maryland State AGMar 17 · first

Montana State AGMar 17 · first

Massachusetts State AGMar 17 · first

Maine State AGMar 17 · first

California State AGMar 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-600030
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 17, 2025
Raw hash: 63d807acbf3b0536a919ff7374195576711663ed330e8b70eeb82f0c1ad65346

Linked disclosures

Ransomware claims (1)

Regulatory filings (4) · sorted by filing gap

Reporting entityMark Thomas

Victim entityMark Thomas

Incidentdiscovered Oct 19, 2024

Stated responseTook steps to ensure the security of our systems

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov