Kevin J Palmer & Co, CPA
bd_0346fcfb8345a62c · schema v1 · pii pii-v1
Full breach record for Kevin J Palmer & Co, CPA →Kevin J Palmer & Co, CPA, a California-based CPA firm, disclosed a cyberattack occurring between May 21 and June 6, 2017. Cybercriminals exploited a remote-access system used by outside IT personnel, utilizing a staff member's credentials to access tax filing software. The attackers filed fictitious federal tax returns to fraudulently claim refunds. Affected data included names, SSNs, W-2s, 1099s, and bank account details. The firm engaged forensic investigators, secured systems, changed credentials, and partnered with Equifax to provide 12 months of identity theft protection.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-100465
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 20, 2017
- Raw hash
- cae3d0b31e0906829704b2308fbcd9bf1771065f2c2d62c53f9c9c9d650d4ee1
Reporting entity
- Name
- Kevin J Palmer & Co, CPAnorm: kevin j palmer co cpa
Victim entity
- Name
- Kevin J Palmer & Co, CPAnorm: kevin j palmer co cpa
Incident
- Discovered
- Jun 6, 2017
- Materiality determined
- —
- Notification sent
- Jul 14, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Worked with the Internal Revenue Service
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 6 weeks(44 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 38d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jun 6, 2017→ Notified: Jul 14, 201738d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.