HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancialMediumContained

Kevin Harrington, CPA

bd_0735668539fd6918 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 11, 2016

Filed

Jan 9, 2017

To disclose

8 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

67%

Full breach record for Kevin Harrington, CPA →

Kevin Harrington, CPA detected unauthorized access to his computer on November 11, 2016. An IT firm confirmed on November 18, 2016, that client tax return information, including names, addresses, dates of birth, and Social Security numbers, was accessed. The firm disabled online access, changed passwords, replaced the computer, and notified IRS and CFTB. 12 months of credit monitoring were offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 59 days

Nov 11, 2016

Discovered

Jan 9, 2017

Filed

vs. sector median

11 wks faster

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_69bcd1e94876aa4d2017-01-10 · +1dCandidate

Name: Kevin Harrington, CPA
norm: kevin harrington cpa

Name: Kevin Harrington, CPA
norm: kevin harrington cpa
Industry: Professional Servicesllm

Discovered: Nov 11, 2016
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified the Internal Revenue e-File Services DepartmentNotified the Internal Revenue Service/Criminal InvestigationNotified the California Franchise Tax Board

During the incident: Disabled online access to my computer
Notified the Internal Revenue e-File Services Department
Notified the Internal Revenue Service/Criminal Investigation
Notified the California Franchise Tax Board
Changed all passwords
Replaced my computer
Offering credit and identity monitoring services for 12 months at no cost
Changes made: Replaced my computer to ensure that no one has access to any client information without authorization
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGJan 9 · first · this page

New Hampshire State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-65751
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 9, 2017
Raw hash: 499d86a3daa4772234643ac4879616ff4009c4c0c4cffd3366134e0206724f2c

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityKevin Harrington, CPA

Victim entityKevin Harrington, CPA

Incidentdiscovered Nov 11, 2016

Stated responseDisabled online access to my computer

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov