HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)LowContained

Forrestall CPAs LLC

bd_163b29e9617aa70a · schema v1 · pii pii-v2

Severity

Low

Discovered

—

Filed

Aug 17, 2026

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

65%

Full breach record for Forrestall CPAs LLC →

Forrestall CPAs LLC reported unauthorized access to its network between December 22 and December 30, 2025. An unauthorized individual viewed and obtained files containing names and other personal information. The firm engaged a cybersecurity firm, secured systems, notified law enforcement, and offered one year of identity monitoring through Epiq.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 22, 2025

Begins

Aug 17, 2026

Filed

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

New Hampshire State AGbd_7957b603b8ba283d2026-08-19 · +2dVerified
Texas State AGbd_fdba9b1b428a74802026-08-21 · +4dVerified
Indiana State AGbd_cdfc25a8880b1f1e2026-08-07 · +10dVerified
Massachusetts State AGbd_0182f420b8eee1a52026-08-01 · +16dCandidate

Name: Forrestall CPAs LLC
norm: forrestall cpas

Name: Forrestall CPAs LLC
norm: forrestall cpas
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Dec 22, 2025 – Dec 30, 2025
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified law enforcement

During the incident: Took measures to secure our systems
Launched an investigation
Engaged a cybersecurity firm to assist
Notified law enforcement about this incident
Offering complimentary, one-year membership of identity monitoring services through Epiq
Changes made: Taken measures to further enhance the security of our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Massachusetts State AGAug 1 · first

Indiana State AG+6d

California State AG+16d · this page

New Hampshire State AG+18d

Texas State AG+20d

Pattern: first filing Aug 1 (MA), last Aug 21 (TX) — a 20-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-628368
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 17, 2026
Raw hash: ff8217602bd8d0a6754b985cd3ac8a9cc05f5c68c8e04c71f50e04ec41dfa47b

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityForrestall CPAs LLC

Victim entityForrestall CPAs LLC

IncidentUnknown

Stated responseTook measures to secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov