MalwareProfessional ServicesProfessional ServicesRansomwareData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Bill Pollard, JR CPA

bd_1217c13d23c5d092 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 31, 2022

Filed

Jun 28, 2022

To disclose

13 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for Bill Pollard, JR CPA →2 incidents on file

Bill Pollard, Jr CPA experienced a data breach discovered on March 31, 2022, involving malicious code in company software. Attackers exfiltrated a file containing personal information including names, addresses, SSNs, dates of birth, and bank account numbers. The company engaged forensic experts, implemented security enhancements (endpoint protection, firewalls, encryption), and notified law enforcement (FBI, IRS, CFTB). Affected individuals were offered two years of credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Mar 31, 2022 → Notified May 17, 202247d ✓ CA 60-day OK13 weeks discovery → filing

Incident timeline

discovery → filing · 13 weeks / 89 days

Mar 31, 2022

Begins

Mar 31, 2022

Discovered

Jun 28, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_68e137d7ba2564e62022-06-27 · +1dCandidate

Name: Bill Pollard, JR CPA
norm: bill pollard jr cpa
Domain: billpollardcpa.com

Name: Bill Pollard, JR CPA
norm: bill pollard jr cpa
Domain: billpollardcpa.com
Industry: Professional Servicesllm

Discovered: Mar 31, 2022
Breach occurred: Mar 31, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 17, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Contacted local law enforcementContacted the FBIContacted the IRSContacted the California Franchise Tax Board

During the incident: Hired a forensic analysis expert to investigate the event
Engaged a computer forensics expert to determine the cause of the unauthorized access
Implemented a cloud-delivered endpoint protection platform
Implemented network firewalls
Implemented disk encryption
Implemented policies for computer updates and password rotation
Contacted local law enforcement
Contacted the FBI
Contacted the IRS
Contacted the California Franchise Tax Board
Offering monitoring service for two years
Changes made: Implemented a cloud-delivered endpoint protection platform
Implemented network firewalls
Implemented disk encryption
Implemented policies for computer updates and password rotation
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(89 days from discovery to filing)
Compliance flags: CA 60-day OK · 47d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Mar 31, 2022
→ Notified: May 17, 2022
47d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Mar 31, 2022 → Notified: May 17, 2022	47d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGJun 27 · first

California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-554702
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 28, 2022
Raw hash: 4641b27878d72ecbefa9dde3a880f9acfb8ec3d38e2688fa5a0a951a2ece7021

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityBill Pollard, JR CPA

Victim entityBill Pollard, JR CPA

Incidentdiscovered Mar 31, 2022

Stated responseHired a forensic analysis expert to investigate the event

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov