MalwareRansomwareData EncryptedData ExfiltratedIDENTITY_BASICLowContained
Macmillan and its affiliates
bd_ee9c616b15df8f76 · schema v1 · pii pii-v1
Full breach record for Macmillan and its affiliates →Macmillan and its affiliates reported a cybersecurity incident occurring between June 16 and June 25, 2022. The incident involved suspicious activity resulting in the encryption of files (ransomware) and unauthorized access to systems. Personal information, including names, was exfiltrated. Macmillan engaged third-party specialists, notified federal law enforcement, and offered 24 months of credit monitoring and identity restoration services to affected individuals across multiple US jurisdictions.
California clockDiscovered Jun 25, 2022 → Notified Dec 20, 2022178d ✗ CA 60-day late25 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-560263
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 20, 2022
- Raw hash
- 011e3b80dd03d62ccc5b98381a07e7c9a9844cea3ed41f8ca3a5d7c21caa218e
Reporting entity
- Name
- Macmillan and its affiliatesnorm: macmillan and its affiliates
Victim entity
- Name
- Macmillan and its affiliatesnorm: macmillan and its affiliates
Incident
- Discovered
- Jun 25, 2022
- Materiality determined
- —
- Notification sent
- Dec 20, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified federal law enforcement
Compliance
- Time to disclose
- 25 weeks(178 days from discovery to filing)
- Compliance flags
- CA 60-day late · 178d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 25, 2022→ Notified: Dec 20, 2022178d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.