HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)LowContained

Black, Gould & Associates

bd_e2d61f62b61576ab · schema v1 · pii pii-v1

Severity

Low

Discovered

Sep 9, 2022

Filed

Dec 5, 2022

To disclose

12 weeks

Affected

Not disclosed

Linked

5 filings

Confidence

64%

Full breach record for Black, Gould & Associates →

Black, Gould & Associates, Inc. reported unauthorized access to its systems between August 31 and September 10, 2022, discovered on September 9, 2022. The incident involved potential exposure of names and other personal information. The company secured systems, rotated passwords, engaged forensic specialists, and offered identity monitoring services. No misuse of data was indicated.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 9 days

discovery → filing · 12 weeks / 87 days

Aug 31, 2022

Begins

Sep 9, 2022

Discovered

Dec 5, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_0479658b2be9cddb2022-12-05Candidate
Indiana State AGbd_ae29c8b5786749782022-12-05Verified
Montana State AGbd_f3c08bc45e1886752022-12-05Verified
New Hampshire State AGbd_cb1f2d66d39bb5af2022-12-09 · +4dVerified

Name: Black, Gould & Associates
norm: black gould associates

Name: Black, Gould & Associates
norm: black gould associates
Industry: Professional Servicesllm

Discovered: Sep 9, 2022
Breach occurred: Aug 31, 2022 – Sep 10, 2022
Undetected for: 9 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 5, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown
Threat actor: External

During the incident: Took steps to secure the environment
Rotating passwords
Conducted a diligent investigation aided by third-party forensic specialists
Implemented additional technical security measures
Reviewing and enhancing existing data privacy policies and procedures
Providing access to complimentary identity monitoring and restoration services through IDX
Changes made: Implemented additional technical security measures designed to mitigate recurrence
Reviewing and enhancing existing data privacy policies and procedures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(87 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGDec 5 · first

Indiana State AGDec 5 · first

Montana State AGDec 5 · first

California State AGDec 5 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-559733
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 5, 2022
Raw hash: e9d6290e0cfae85c7be0019be06596d4596b367319ecd789dedf9a9cf8f82c7c

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityBlack, Gould & Associates

Victim entityBlack, Gould & Associates

Incidentdiscovered Sep 9, 2022

Stated responseTook steps to secure the environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov