MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Anderson McPharlin & Conners, LLP

bd_e2bbab5e3f4d6924 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 24, 2021

Filed

Dec 23, 2021

To disclose

26 weeks

Affected

Not disclosed

Confidence

63%

Full breach record for Anderson McPharlin & Conners, LLP →2 incidents on file

Anderson McPharlin & Conners, LLP experienced a ransomware incident on June 24, 2021, resulting in the encryption of information on its computer systems. An unauthorized party accessed data including names, addresses, dates of birth, SSNs, driver's license numbers, financial account information, and limited health information. The firm engaged forensic investigators, secured systems, and offered credit monitoring. Substitute notice was provided due to incomplete contact information.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jun 24, 2021 → Notified Dec 23, 2021182d ✗ CA 60-day late26 weeks discovery → filing

Incident timeline

discovery → filing · 26 weeks / 182 days

Jun 24, 2021

Begins

Jun 24, 2021

Discovered

Dec 23, 2021

Filed

vs. sector median

+8 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Anderson McPharlin & Conners, LLP
norm: anderson mcpharlin conners
Domain: amclaw.com

Name: Anderson McPharlin & Conners, LLP
norm: anderson mcpharlin conners
Domain: amclaw.com
Industry: Professional Servicesllm

Discovered: Jun 24, 2021
Breach occurred: Jun 24, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 23, 2021
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for Impact
Threat actor: External

During the incident: Immediately terminated access to its environment and took steps to secure its systems before bringing them back online
Engaged a specialized cybersecurity firm to conduct a forensics investigation of the Incident
Conducted an internal investigation in an attempt to identify those individuals whose personally identifiable information may have been compromised
Providing substitute notice of the Incident pursuant to applicable law
Changes made: Strengthening password complexity requirements
Updating intrusion detection and intrusion prevention policies
Updating security awareness and training for our employees
Obtained complimentary credit monitoring and identity theft protection for all potentially affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 weeks(182 days from discovery to filing)
Compliance flags: CA 60-day late · 182d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jun 24, 2021
→ Notified: Dec 23, 2021
182d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jun 24, 2021 → Notified: Dec 23, 2021	182d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-548849
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 23, 2021
Raw hash: 10ee12026037359ac79fe7507f255a6233492cb2a7c714d7dc252b1d005cb38b

Reporting entityAnderson McPharlin & Conners, LLP

Victim entityAnderson McPharlin & Conners, LLP

Incidentdiscovered Jun 24, 2021

Stated responseImmediately terminated access to its environment and took steps to secure its systems before bringing them back online

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov