HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICLowContained
Apro, LLC
bd_e2ae2834649e791a · schema v1 · pii pii-v1
Full breach record for Apro, LLC →Apro, LLC d/b/a United Pacific disclosed that an unauthorized third party accessed certain systems between February 19, 2025, and March 2, 2025, and obtained files containing personal information, including names. The incident was discovered on March 22, 2025. The company engaged cybersecurity firms, notified law enforcement, and is offering identity protection services to affected individuals.
California clockDiscovered Mar 22, 2025 → Notified Dec 29, 2025282d ✗ CA 60-day late40 weeks discovery → filing
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_16389e96311185daOregon State AGfiled 2025-12-29Candidate
- bd_5a2af9e1606bffabCalifornia State AGfiled 2025-12-29Verified
- bd_a14649851a366e8cMaine State AGfiled 2025-12-29Verified
- bd_bc689181dec5de1dIndiana State AGfiled 2025-12-29Candidate
Show 1 more filing ↓Show fewer ↑
- bd_c87591ff1ff51cddIndiana State AGfiled 2025-12-29Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-616356
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 29, 2025
- Raw hash
- af01358cdc3f103acfad39713a8411f185d7a83139bd96d91687b60899e61be4
Reporting entity
- Name
- Apro, LLCnorm: apro
Victim entity
- Name
- Apro, LLCnorm: apro
Incident
- Discovered
- Mar 22, 2025
- Materiality determined
- —
- Notification sent
- Dec 29, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 40 weeks(282 days from discovery to filing)
- Compliance flags
- CA 60-day late · 282d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 22, 2025→ Notified: Dec 29, 2025282d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.