Where does the Kayali & CO., P.A. case file come from?

Every entry is taken from the breach report Kayali & CO., P.A. lodged with the Oregon Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: Kayali & CO., P.A. Data Breach

This file collects the dated facts on record for the Kayali & CO., P.A. incident. The state report is dated December 2, 2025. The incident itself is dated September 29, 2025.

Timeline

64 days separate the incident date from the date it was reported.

September 29, 2025Incident dateWhen the filing says the breach took place.
December 2, 2025Report filed in OregonDate the notice was lodged with the Oregon Attorney General.

Case facts

Filing state: Oregon
Date reported: December 2, 2025
Incident date: September 29, 2025
Receiving office: Oregon Attorney General

Case notes

Kayali & CO., P.A., an Oregon-based professional association, officially reported a data incident to regulators on December 2, 2025. The firm indicated that an unauthorized event compromised its systems on September 29, 2025, potentially exposing personal information held within its files.

As of the filing date, Kayali & CO., P.A. is still investigating the circumstances of this security incident. The public filing does not specify the exact nature of the breach or the categories of personal information that may have been accessed or acquired. Law firms often handle highly sensitive client data, making any exposure a serious concern.

Individuals who have received a direct notification letter from Kayali & CO., P.A. should carefully read its contents. This letter will provide details specific to their situation and explain what information was involved and any recommended steps to take.

To protect themselves, affected individuals are generally advised to remain vigilant for any unusual activity across their personal accounts. This includes regularly monitoring financial statements, credit reports, and any online accounts for suspicious transactions or unauthorized access attempts.

It is also prudent to be cautious of unexpected communications, such as emails, texts, or calls requesting personal information, as these could be phishing attempts. Always verify the legitimacy of such requests directly with the source, using contact information obtained independently, not from the suspicious communication.

This report is based on information made public through regulatory filings. Further updates regarding the scope of the incident or additional protective measures may be provided directly by Kayali & CO., P.A. as their investigation progresses.

Questions about this case file

Where does the Kayali & CO., P.A. case file come from?: Every entry is taken from the breach report Kayali & CO., P.A. lodged with the Oregon Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Oregon data breaches

Named in the Kayali & CO., P.A. breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Oregon case files