HackingCustomer Data InvolvedIDENTITY_BASICLowContained
Nth Degree Investment Group
bd_ef1e029d49b66487 · schema v1 · pii pii-v1
Full breach record for Nth Degree Investment Group →Nth Degree Investment Group (including Fern brand) notified California residents of a data security incident where an unauthorized party accessed their network between December 12, 2024, and December 20, 2024. The company discovered the incident on May 14, 2025, following a forensic investigation. Affected data included address information. The company engaged external cybersecurity professionals, contained the threat, and is offering 12 months of credit monitoring through TransUnion.
California clockDiscovered May 14, 2025 → Notified Jun 25, 202542d ✓ CA 60-day OK6 weeks discovery → filing
This filing is one of 8 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_1ce31733aa2c2089Washington State AGfiled 2025-06-25Verified
- bd_72aa3a112242a3edOregon State AGfiled 2025-06-25Verified
- bd_a907c6059f2ac2faNew Hampshire State AGfiled 2025-06-30(5d gap)Verified
- bd_8cfa10798e6356feTexas State AGfiled 2025-07-01(6d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 69d gap
- bd_1b9aaf0de99f017cMaine State AGfiled 2025-04-17(69d gap)Candidate
- bd_57040b33cd2f040cIndiana State AGfiled 2025-04-17(69d gap)Verified
- bd_f041b9e6245a6e66California State AGfiled 2025-04-17(69d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-604519
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 25, 2025
- Raw hash
- 5dc8f3985ec5e85f4f7ddc01ae8d8da15f306f640a6f3d1982877452650e3783
Reporting entity
- Name
- Nth Degree Investment Groupnorm: nth degree investment
Victim entity
- Name
- Nth Degree Investment Groupnorm: nth degree investment
Incident
- Discovered
- May 14, 2025
- Materiality determined
- —
- Notification sent
- Jun 25, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unknown
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(42 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 42d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: May 14, 2025→ Notified: Jun 25, 202542d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.