HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIALMediumContained
Stallcup & Associates, CPAs
bd_0f5a846bdb82d438 · schema v1 · pii pii-v1
Full breach record for Stallcup & Associates, CPAs →Stallcup & Associates CPAs experienced an email data incident on January 10, 2017, where an employee's email account was compromised. The attacker obtained email credentials and sent fraudulent emails to clients. The firm notified clients, re-secured the account, engaged forensic specialists, and notified the FBI. Affected data included names, addresses, SSNs, and financial/tax information.
California clockDiscovered Jan 10, 2017 → Notified Jan 10, 20170d ✓ CA 60-day OK7 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-66627
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 1, 2017
- Raw hash
- 66f02a68bcc7b16e94b29799031d06814edfb36c634fc94eb614e9d1d577192c
Reporting entity
- Name
- Stallcup & Associates, CPAsnorm: stallcup associates cpas
Victim entity
- Name
- Stallcup & Associates, CPAsnorm: stallcup associates cpas
Incident
- Discovered
- Jan 10, 2017
- Materiality determined
- —
- Notification sent
- Jan 10, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified the FBI
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 7 weeks(50 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jan 10, 2017→ Notified: Jan 10, 20170d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.