HackingConstructionCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIGovernment IDFinancial accountFinancial credentialsHealth (basic)AuthenticationCredentialsMediumContained

Rockrose Development

bd_dd2409a79ea59245 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 12, 2025

To disclose

—

Affected

Not disclosed

Linked

9 records

Confidence

83%

Full breach record for Rockrose Development →

Rockrose Development L.L.C. experienced a security incident in which unauthorized individuals accessed its systems and claimed to have acquired confidential data. Potentially affected data includes names, Social Security numbers, taxpayer IDs, driver's license numbers, passport numbers, bank account and routing numbers, health insurance information, medical information, and online account credentials. The notification letter was dated December 12, 2025. Experian IdentityWorks (24 months) was offered to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Jul 4, 2025

Begins

Dec 12, 2025

Filed

This filing is one of 9 records about the same incident.View merged incident

A leak claim by play about this victim was first seen 151 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_aaa9c5b7ccde1d512025-07-04 · +161dVerified by operator

Regulatory filings (7) · sorted by filing gap

Nebraska State AGbd_00d7163709e0a38c2025-12-12Verified by operator
Massachusetts State AGbd_25c4b263066579c52025-12-12Verified by operator
New Hampshire State AGbd_327fd30fe6daab6c2025-12-12Verified
Indiana State AGbd_75178716da4cecff2025-12-12Verified

Show 3 more filings ↓

Vermont State AGbd_8f67a2bc7c1abe0e2025-12-12Verified
Maine State AGbd_b356f77ac27998582025-12-12Verified
Texas State AGbd_d9ccc4ea910fc3472025-12-12Verified

Name: Rockrose Development
norm: rockrose development
Domain: rockrose.com

Name: Rockrose Development
norm: rockrose development
Domain: rockrose.com

Discovered: —
Breach occurred: Jul 4, 2025
Materiality determined: —
Notification sent: Dec 12, 2025
Affected individuals: Not disclosed
Data types: PIIGovernment IDFinancial accountFinancial credentialsHealth (basic)AuthenticationCredentials
Data elements: Social Security numberMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated CollectionT1074 Data Staged
Threat actor: ExternalFinancial
Regulator citations: Filed notification with California Office of the Attorney General

During the incident: Launched an investigation and engaged third-party experts to assist in its investigation
Took steps to secure its systems
Implemented additional cybersecurity safeguards
Working closely with internal and external experts to further enhance the security of systems
Notifying affected individuals
Offering complimentary access to Experian IdentityWorks for 24 months
Changes made: Implemented additional cybersecurity safeguards
Working closely with internal and external experts to further enhance the security of systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Nebraska State AGDec 12 · first

Massachusetts State AGDec 12 · first

New Hampshire State AGDec 12 · first

Indiana State AGDec 12 · first

Vermont State AGDec 12 · first

Maine State AGDec 12 · first

Texas State AGDec 12 · first

California State AGDec 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-615646
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 12, 2025
Raw hash: 9f6f220a93dafb5395705f7a186e9b5dc53c3a8cd595e95fc2f564623eb978ba

Linked disclosures

Ransomware claims (1)

Regulatory filings (7) · sorted by filing gap

Reporting entityRockrose Development

Victim entityRockrose Development

IncidentUnauthorized Access

Stated responseLaunched an investigation and engaged third-party experts to assist in its investigation

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov