HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Branton de Jong and Associates
bd_19d22f515f8fba49 · schema v1 · pii pii-v1
Full breach record for Branton de Jong and Associates →Branton, de Jong and Associates, a tax preparation firm, reported a data breach affecting client information. Unauthorized access occurred between February 11 and 26, 2018, from a foreign IP address. Affected data included names, SSNs, W-2/1099 forms, and bank account details. The firm engaged forensic investigators, notified the FBI and IRS, and offered credit monitoring services to affected clients.
California clockDiscovered Feb 26, 2018 → Notified Mar 27, 201829d ✓ CA 60-day OK27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_1950c9a414bfdd5aMontana State AGfiled 2018-03-27(2d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-134775
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 25, 2018
- Raw hash
- 0ef975619822c120990e48a53038991266d5614fb1dd9f95e3397c6bb84f60d8
Reporting entity
- Name
- Branton de Jong and Associatesnorm: branton de jong and associates
Victim entity
- Name
- Branton de Jong and Associatesnorm: branton de jong and associates
Incident
- Discovered
- Feb 26, 2018
- Materiality determined
- —
- Notification sent
- Mar 27, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBINotified the IRSNotified all applicable state agencies
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 26, 2018→ Notified: Mar 27, 201829d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.