C. Overaa & Co. notified the California Attorney General of a data breach involving unauthorized access to its network. The incident occurred between December 17 and 19, 2022, and was discovered on December 18, 2022. Affected data may include names, addresses, Social Security numbers, financial account information, and employee identification numbers. The company engaged third-party forensic specialists, implemented additional security safeguards, and offered 24 months of credit monitoring and identity protection services to affected individuals.