HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumActive

Gatto, Pope & Walwick, LLP

bd_0afc6f6f70fb7baa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 1, 2022

Filed

Jul 27, 2022

To disclose

17 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Gatto, Pope & Walwick, LLP →

Gatto, Pope & Walwick, LLP experienced unauthorized access to an employee's work-related accounts between March 17 and May 8, 2022. The actor accessed and acquired files containing names, addresses, SSNs, government IDs, and financial account information. The firm detected the incident in April 2022 after receiving reports of tax identity verification requests. Investigation is ongoing. Credit monitoring is offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 15 days

discovery → filing · 17 weeks / 117 days

Mar 17, 2022

Begins

Apr 1, 2022

Discovered

Jul 27, 2022

Filed

vs. sector median

2 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_3f068459ece998722022-07-28 · +1dVerified

Name: Gatto, Pope & Walwick, LLP
norm: gatto pope walwick

Name: Gatto, Pope & Walwick, LLP
norm: gatto pope walwick
Industry: Professional Servicesllm

Discovered: Apr 1, 2022
Breach occurred: Mar 17, 2022 – May 8, 2022
Undetected for: 15 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 27, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email CollectionT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified federal law enforcementReporting this incident to applicable regulatory agencies
Initial access: valid_credentials

During the incident: Took steps to secure its environment
Launched an investigation to determine the potential cause of this activity
Commenced a review of relevant files to determine what information may have been impacted
Notified federal law enforcement of this incident
Reporting this incident to applicable regulatory agencies, as required
Assessing and validating the security of our systems
Reviewing our technical safeguards, policies, procedures, and employee training program
Changes made: Reviewing our technical safeguards, policies, procedures, and employee training program to reduce the likelihood of similar events from occurring in the future
Offering complimentary credit monitoring through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(117 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGJul 27 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-555689
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 27, 2022
Raw hash: 575a93917cebf3306585c6b5f2f77b97543791ee318b5c413a1da49d9d333aac

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityGatto, Pope & Walwick, LLP

Victim entityGatto, Pope & Walwick, LLP

Incidentdiscovered Apr 1, 2022

Stated responseTook steps to secure its environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov