HackingProfessional ServicesFinancial ServicesProfessional ServicesStolen CredentialsBECData ExfiltratedMulti-Stage ChainCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountHighContained

Glenn R. Millar, CPA, PC

bd_1b374586e8540624 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 12, 2016

Filed

Mar 29, 2017

To disclose

24 weeks

Affected · nationwide

1,3132 in this filing

Confidence

64%

Full breach record for Glenn R. Millar, CPA, PC →

Glenn R. Millar, CPA, PC notified NH AG of a hacking incident (May-July 2016) discovered Oct 2016, initially affecting 404 individuals. A supplemental notice on March 29, 2017, revealed 909 additional affected individuals (1,313 total), including 2 NH residents. Data included SSNs, financial account info, and names. Attackers fraudulently filed tax returns. Remediation included password resets, forensic review, and credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 164 days

discovery → filing · 24 weeks / 168 days

May 1, 2016

Begins

Oct 12, 2016

Discovered

Mar 29, 2017

Filed

vs. sector median

+5 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1,313 affectedView incident

Name: Jackson Lewis
norm: jackson lewis
Domain: jacksonlewis.com

Name: Glenn R. Millar, CPA, PC
norm: glenn r millar cpa
Industry: Professional ServicesllmFinancial Servicesllm

Discovered: Oct 12, 2016
Breach occurred: May 1, 2016 – Jul 31, 2016
Undetected for: 164 daysoccurrence → discovery
Materiality determined: —
Notification sent: Mar 29, 2017
Affected individuals: 1,313state + nationwide
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Internal Revenue ServiceUpdated accounts with the IRS and tax preparation software vendor
Initial access: exploit_public_facing

During the incident: Engaged a nationally recognized third-party forensic investigation firm
Contacted various law enforcement agencies including the Internal Revenue Service
Changed system passwords, including for accounting and tax software products
Continued to monitor the situation
Reexamining current data privacy and security policies and procedures
Changes made: Reexamining current data privacy and security policies and procedures to find ways of reducing the risk of future data incidents
Reviewing systems and making improvements to minimize chances of this happening again
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(168 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/milar-cpa-20170329.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 29, 2017
Raw hash: 2861eef05520f497cf5c7b4d44b7ab4186c43ff55bd8918070352429080a3a32

Reporting entityJackson Lewis

Victim entityGlenn R. Millar, CPA, PC

Incidentdiscovered Oct 12, 2016

Stated responseEngaged a nationally recognized third-party forensic investigation firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov