---
title: "Frazer LLP March 2025 network data incident"
description: "Frazer LLP disclosed possible acquisition of personal data after a March 2025 incident disrupted network connectivity."
incident_type: "Data incident"
status: "active"
last_modified: "2026-10-20"
canonical_url: "https://www.ally.security/incidents/frazer-llp-network-data-incident-2025"
markdown_url: "https://www.ally.security/incidents/frazer-llp-network-data-incident-2025.md"
stix_url: "https://www.ally.security/incidents/frazer-llp-network-data-incident-2025/stix.json"
---

# Frazer LLP March 2025 network data incident

An investigation linked possible personal-data acquisition to a March 2025 network incident.

Last modified Oct 20, 2026 · 2 sources

## Summary

- **Environment:** Frazer LLP network
- **Operational impact:** Network connectivity disrupted; possible personal-data acquisition
- **Financial impact:** No incident cost established in the reviewed evidence

## What happened

[Frazer LLP](https://frazerllp.com/) experienced a cyber incident affecting network connectivity around March 25, 2025. Its [notification](https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf) says a later review found that personal data may have been acquired, likely between March 24 and 25. [1](#source-1)

## Impact

The public sample identifies full names as potentially affected; other data fields are redacted. Frazer said it had no evidence of related financial fraud or identity theft. An affected-person total and the duration of the network disruption are not established. [1](#source-1)

## Timeline

### September 18, 2026 — Possible data acquisition determined

The investigation and document review identified the potential personal-data impact. [1](#source-1)

### October 16, 2026 — California report recorded

The [registry](https://oag.ca.gov/privacy/databreach/list) recorded Frazer’s notice. [2](#source-2)

### October 20, 2026 — Briefing updated

This briefing was last reviewed and updated on October 20, 2026.

## Threat Group & Attack Vector

The initial access method, attacker identity and whether ransomware was involved remain unestablished.

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

Frazer worked with external cybersecurity professionals and offered identity-protection services through [IDX](https://www.idx.us/). The public letter does not establish a recovery date. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/frazer-llp-network-data-incident-2025/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Frazer LLP March 2025 network incident notice

official · Frazer LLP

<https://oag.ca.gov/system/files/Frazer_LLP_Redacted_Sample_Proof_40313313v1.pdf>

<a id="source-2"></a>

### Data Security Breach List — 2026 records

regulatory · California Department of Justice, Office of the Attorney General

<https://oag.ca.gov/privacy/databreach/list>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Occurred At · 100% confidence · current**  
   California report recorded: 2026-10-16
2. **Occurred At · 100% confidence · current**  
   Possible personal-data acquisition determined: 2026-09-18
3. **Exposed Data Category · 100% confidence · current**  
   Personal information described in the notification: Names
4. **Resulted In · 100% confidence · current**  
   Frazer LLP March 2025 network data incident: On September 18, 2026, Frazer determined that personal data may have been acquired without authorization, likely between March 24 and 25, 2025.
5. **Resulted In · 100% confidence · current**  
   Frazer LLP March 2025 network data incident: Possible personal-data acquisition determined
6. **Affected Organization · 100% confidence · current**  
   Frazer LLP March 2025 network data incident: Frazer LLP
7. **Resulted In · 100% confidence · current**  
   Frazer LLP March 2025 network data incident: Frazer experienced a cybersecurity incident affecting network connectivity on or about March 25, 2025.
8. **Resulted In · 100% confidence · current**  
   Frazer LLP March 2025 network data incident: Frazer investigated with external cybersecurity professionals and conducted a document review.
9. **Resulted In · 100% confidence · current**  
   Frazer LLP March 2025 network data incident: Personal information described in the notification
10. **Resulted In · 100% confidence · current**  
   Frazer LLP March 2025 network data incident: Frazer offered IDX identity-protection services and said it had no evidence of related financial fraud or identity theft.
11. **Resulted In · 100% confidence · current**  
   Frazer LLP March 2025 network data incident: California report recorded

</details>