HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPHIHEALTH_BASICIDENTITY_BASICLowContained
Young Consulting
bd_f7562288ebd80f40 · schema v1 · pii pii-v1
Full breach record for Young Consulting →Young Consulting LLC notified the California AG of a data breach where an unauthorized actor accessed its network between April 10-13, 2024, and downloaded files containing names and health information. The company took systems offline, engaged forensic investigators, and notified law enforcement. This supplemental notice offers 12 months of credit monitoring to affected individuals.
California clockDiscovered Apr 13, 2024 → Notified Jan 28, 2025290d ✗ CA 60-day late15 months discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_bedd380143f5919bMaine State AGfiled 2025-07-02Candidate
- bd_d8afddd50e05d315New Hampshire State AGfiled 2025-07-02Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-604904
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 2, 2025
- Raw hash
- c8ba72a61c4898c7cb0eded3c6d200e9348011ab1f34e52a2279407eb82cc785
Reporting entity
- Name
- Young Consultingnorm: young consulting
- Domain
- youngconsulting-us.com
Victim entity
- Name
- Young Consultingnorm: young consulting
- Domain
- youngconsulting-us.com
Incident
- Discovered
- Apr 13, 2024
- Materiality determined
- —
- Notification sent
- Jan 28, 2025
- Affected individuals
- Not disclosed
- Data types
- PHIHEALTH_BASICIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- External
Compliance
- Time to disclose
- 15 months(445 days from discovery to filing)
- Compliance flags
- CA 60-day late · 290dLeak >180d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 13, 2024→ Notified: Jan 28, 2025290d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.