HackingCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASICMediumContained
Fleming
bd_e33be3110715a48c · schema v1 · pii pii-v1
Full breach record for Fleming →Fleming, Nolen & Jez, LLP notified clients of a cybersecurity event where an unknown third party accessed their network on or around January 26, 2023. The firm discovered the incident on February 6, 2023, after receiving communication from the third party. Affected data included names, contact information, dates of birth, and in some cases, medical records, claim information, and Social Security numbers. The firm retained forensic investigators, modified access controls, and offered 24 months of credit monitoring.
California clockDiscovered Feb 6, 2023 → Notified Mar 2, 202324d ✓ CA 60-day OK28 days discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_07f176d7f6cb2ed4New Hampshire State AGfiled 2023-03-06Verified
- bd_3c0fd6238ccfa2deMaine State AGfiled 2023-03-06Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-563932
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 6, 2023
- Raw hash
- 4857f61d2798e264b98c323320e7b91f2663f522002728d71a3aaffc917c3899
Reporting entity
- Name
- Flemingnorm: fleming
- Domain
- fleming-law.com
Victim entity
- Name
- Flemingnorm: fleming
- Domain
- fleming-law.com
Incident
- Discovered
- Feb 6, 2023
- Materiality determined
- —
- Notification sent
- Mar 2, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTPHIHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
Compliance
- Time to disclose
- 28 days(28 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 24d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 6, 2023→ Notified: Mar 2, 202324d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.