The California Office of the Attorney General disclosed a data breach affecting Edgar & Associates LLP, discovered in April 2017 but originating from unauthorized access between April 1–2, 2016. The intrusion was detected later, between September 28 and November 3, 2016, via exploitation of Remote Desktop Protocol (RDP)—a common vector for cyber intrusions. While the exact scope of compromised data remains undisclosed, the breach suggests potential exposure of sensitive information, though no explicit confirmation of stolen records (e.g., financial, personal, or employee data) was provided. The delayed detection highlights vulnerabilities in monitoring and response protocols, raising concerns about prolonged unauthorized access. The lack of clarity on affected individuals or specific data types leaves the full impact ambiguous, but the incident underscores risks associated with insecure remote access mechanisms and the need for timely breach identification.