HackingProfessional ServicesProfessional ServicesStolen CredentialsBECData ExfiltratedCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Summit Accounting & Tax, LLC

bd_173364bd61c30782 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 12, 2021

Filed

May 12, 2021

To disclose

4 weeks

Affected

71state residents only

Linked

2 filings

Confidence

66%

Full breach record for Summit Accounting & Tax, LLC →

Summit Accounting & Tax, LLC notified clients that an unauthorized third party accessed tax filing software data around April 12, 2021. The incident involved fraudulent filing of 2020 tax returns and exposure of names, SSNs, and bank account details. The firm notified the IRS, engaged forensic professionals, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 4 weeks / 30 days

Apr 12, 2021

Begins

Apr 12, 2021

Discovered

May 12, 2021

Filed

vs. sector median

13 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_624f32f1f93136be2021-05-12Verified

Name: Summit Accounting & Tax, LLC
norm: summit accounting tax

Name: Summit Accounting & Tax, LLC
norm: summit accounting tax
Industry: Professional Servicesllm

Discovered: Apr 12, 2021
Breach occurred: Apr 12, 2021
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 71state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: notified the Internal Revenue Servicefiled an Identity Theft Affidavit (Form 14039) with the IRS
Initial access: valid_credentials

During the incident: Promptly commenced an investigation
Immediately notified the Internal Revenue Service
Working very closely with our own information technology providers and external cybersecurity professionals
Offering you complimentary identity theft protection services through IDX
Filed an Identity Theft Affidavit (Form 14039) with the IRS on your behalf
Changes made: Participating in a prefile program wherein the IRS will receive a file with a list of our clients to ensure the legitimate return is being filed with them
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGMay 12 · first

Montana State AGMay 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-26.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 12, 2021
Raw hash: 9773ec3b80d2c47ef9b484455f48d4b946b7027bf054549d1435b254c9827477

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entitySummit Accounting & Tax, LLC

Victim entitySummit Accounting & Tax, LLC

Incidentdiscovered Apr 12, 2021

Stated responsePromptly commenced an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov