HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

McKinney & Company, CPA's

bd_16bf531155cc0834 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 1, 2020

Filed

Jun 2, 2020

To disclose

9 weeks

Affected

4state residents only

Linked

3 filings

Confidence

66%

Full breach record for McKinney & Company, CPA's →2 incidents on file

McKinney & Company, CPA notified Montana residents that an unauthorized third party accessed their tax software system in April 2020. The incident involved fraudulent filing of 2019 federal tax returns using stolen client credentials. Compromised data included names, SSNs, and potentially bank account details. The firm engaged forensic investigators and notified the IRS.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 9 weeks / 62 days

Apr 1, 2020

Begins

Apr 1, 2020

Discovered

Jun 2, 2020

Filed

vs. sector median

10 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_ae52e2ba884cf7452020-06-02Verified
California State AGbd_33033b5c6e7852222020-06-12 · +10dVerified

Name: McKinney & Company, CPA's
norm: mckinney company cpa s
Domain: katz-mckinney.com

Name: McKinney & Company, CPA's
norm: mckinney company cpa s
Domain: katz-mckinney.com
Industry: Professional Servicesllm

Discovered: Apr 1, 2020
Breach occurred: Apr 1, 2020 – Apr 30, 2020
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified the Internal Revenue Service
Initial access: valid_credentials

During the incident: Secured our tax software
Worked very closely with external cybersecurity professionals to analyze our internal systems
Notified the Internal Revenue Service
Changes made: Offering a one-year membership in Experian IdentityWorksSM Credit 3B
Taken steps to prevent further unauthorized access to client records
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 9 weeks(62 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJun 2 · first

Montana State AGJun 2 · first · this page

California State AG+10d

Pattern: first filing Jun 2 (IN), last Jun 12 (CA) — a 10-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-NotificationDetails-180.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 2, 2020
Raw hash: 6e70e3145739d3e64f44de880954dc1a471dc40b7bfc2947943b6f199eb39406

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMcKinney & Company, CPA's

Victim entityMcKinney & Company, CPA's

Incidentdiscovered Apr 1, 2020

Stated responseSecured our tax software

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov