HackingData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_BASICLowContained
Davidoff Hutcher & Citron LLP
bd_f03d3a1a868c4286 · schema v1 · pii pii-v1
Full breach record for Davidoff Hutcher & Citron LLP →Davidoff Hutcher & Citron LLP detected unauthorized access to its network on August 18, 2023. An investigation determined that between January 12, 2023, and August 18, 2023, an unauthorized party may have removed files containing personal information, specifically names. The firm contained the threat, engaged external cybersecurity professionals, and is offering 12 months of credit monitoring to affected individuals.
Leak gap clock✗ Leak >180d12 months discovery → filing
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Ransomware claims (1)
- bd_4d665d6a92b5ce58Leak Sitealphvfiled 2023-08-21(365d gap)Verified by operator
Regulatory filings (3) · sorted by filing gap
- bd_56edfa3d945c42d0Montana State AGfiled 2024-08-20Verified by operator
- bd_71369198ffef49ceVermont State AGfiled 2024-08-21(1d gap)Verified
- bd_3b37ea23e9b37e6bMaine State AGfiled 2024-08-09(11d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-590496
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 20, 2024
- Raw hash
- 7e88cd0d5598d7de129649646a3206d39f15a6f766c33ed88ffec6e715f41a6e
Reporting entity
- Name
- Davidoff Hutcher & Citron LLPnorm: davidoff hutcher citron
Victim entity
- Name
- Davidoff Hutcher & Citron LLPnorm: davidoff hutcher citron
Incident
- Discovered
- Aug 18, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 12 months(368 days from discovery to filing)
- Compliance flags
- Leak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.