HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Bridgewater Law Group, APC
bd_d7cbf8542454705c · schema v1 · pii pii-v1
Full breach record for Bridgewater Law Group, APC →Bridgewater Law Group, APC notified clients of a data breach discovered on December 24, 2025, involving unauthorized access to systems on December 23, 2025. Affected data may include names, contact info, case documents, medical records, and SSNs. The firm engaged cybersecurity experts, secured systems, and offered 12 months of credit monitoring.
California clockDiscovered Dec 24, 2025 → Notified Dec 31, 20257d ✓ CA 60-day OK15 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-616721
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 8, 2026
- Raw hash
- b33288207137b6169096db94fc2620a89f4980ce06d6860ee01789fcf1d16cbb
Reporting entity
- Name
- Bridgewater Law Group, APCnorm: bridgewater law group apc
Victim entity
- Name
- Bridgewater Law Group, APCnorm: bridgewater law group apc
Incident
- Discovered
- Dec 24, 2025
- Materiality determined
- —
- Notification sent
- Dec 31, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unknown
- Threat actor
- External
- Regulator citations
- Notifying appropriate regulatory authorities and law enforcement as required by law
Compliance
- Time to disclose
- 15 days(15 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 7d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 24, 2025→ Notified: Dec 31, 20257d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.