HackingInformationCustomer Data InvolvedIdentity (basic)LowContained

SafetyFirst

bd_d59ad81fdec3e96e · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 19, 2026

Filed

Jul 23, 2026

To disclose

26 weeks

Affected

Not disclosed

Linked

9 filings

Confidence

66%

Full breach record for SafetyFirst →2 incidents on file

Safetyfirst Systems, LLC experienced unauthorized access to a limited portion of its environment between January 16 and January 19, 2026. The incident was discovered on January 19, 2026, via log review. The company secured the compromise, engaged third-party forensic experts, and notified law enforcement. Personal information, including names, may have been accessed. 196 Rhode Island residents were affected. The company is offering complimentary credit monitoring and fraud assistance services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 19, 2026 → Notified Jul 23, 2026185d ✗ CA 30-day late26 weeks discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 26 weeks / 185 days

Jan 16, 2026

Begins

Jan 19, 2026

Discovered

Jul 23, 2026

Filed

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

South Carolina State AGbd_040d0e18b0e6fc0b2026-07-23Verified
New Hampshire State AGbd_440e40e75b8e3bab2026-07-23Verified
Nebraska State AGbd_50b680190ffb752e2026-07-23Verified
Oregon State AGbd_52833391eb61f3fd2026-07-23Verified

Show 4 more filings ↓up to 22d gap

Massachusetts State AGbd_60c66a4e1edccb922026-07-23Candidate
Washington State AGbd_bc745a0679daa31f2026-07-23Verified
Texas State AGbd_dff0e099643dee8d2026-07-23Verified
Illinois State AGbd_03fb70879d50edd32026-07-01 · +22dVerified

Name: SafetyFirst
norm: safetyfirst
Domain: safetyfirst.com

Name: SafetyFirst
norm: safetyfirst
Domain: safetyfirst.com

Discovered: Jan 19, 2026
Breach occurred: Jan 16, 2026 – Jan 19, 2026
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 23, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Secured and remediated the compromise
Engaged additional third-party experts
Hardened and enhanced our data security
Commenced an investigation
Engaged a national cybersecurity firm to assist in assessing the scope of the incident
Notified law enforcement
Changes made: Evaluating opportunities to further secure our systems to prevent a similar event from occurring again in the future
Arranged for TransUnion Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing proactive fraud assistance through Cyberscout
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(185 days from discovery to filing)
Compliance flags: CA 30-day late · 185d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 19, 2026
→ Notified: Jul 23, 2026
185d 30 calendar days CA 30-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 19, 2026 → Notified: Jul 23, 2026	185d	30 calendar days	CA 30-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJul 1 · first

South Carolina State AG+22d

New Hampshire State AG+22d

Nebraska State AG+22d

Oregon State AG+22d

Massachusetts State AG+22d

Washington State AG+22d

Texas State AG+22d

California State AG+22d · this page

Pattern: first filing Jul 1 (IL), last Jul 23 (CA) — a 22-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-626972
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 23, 2026
Raw hash: 55c66de931d44c2b6fd428481fa4074afd62c0635e310e87cdcdab92bb077770

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entitySafetyFirst

Victim entitySafetyFirst

Incidentdiscovered Jan 19, 2026

Stated responseSecured and remediated the compromise

ComplianceCA 30-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov