
The 570-Day Letter: Five Firms, One Template, and the Two Clocks Rule That Was Not Followed
Frazer LLP, a $20.2 million Anaheim CPA firm, had a cybersecurity incident on March 25, 2025. Its breach notice reached the California Attorney General's list on October 16, 2026 -- 570 days later. Four other firms holding client Social Security numbers did the same thing this fall. The hack wasn't the expensive decision. The silence was.
Read it