HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Cronin, Hanley, Van Zile, & Lorenzo, LLC
bd_1e65fa6d185e636e · schema v1 · pii pii-v1
Full breach record for Cronin, Hanley, Van Zile, & Lorenzo, LLC →Cronin, Hanley & VanZile, LLC (CHV) notified the New Hampshire Attorney General of a data security incident in late April 2021 involving fraudulent tax returns filed using CHV's Electronic Filing Identification Number (EFIN). One New Hampshire resident was affected. CHV hired forensic investigators, reset passwords, implemented MFA, and obtained a new EFIN. Affected individuals received 12 months of credit monitoring and identity restoration services through IDX.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/cronin-hanley-vanzile-20210707.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2021
- Raw hash
- 9d67b002a0297018dae457c4a4c497740df3baa78974acafb03c1dded80a2162
Reporting entity
- Name
- Cronin, Hanley, Van Zile, & Lorenzo, LLCnorm: cronin hanley van zile lorenzo
- Domain
- chvfirm.com
Victim entity
- Name
- Cronin, Hanley, Van Zile, & Lorenzo, LLCnorm: cronin hanley van zile lorenzo
- Domain
- chvfirm.com
Incident
- Discovered
- Apr 1, 2021
- Materiality determined
- —
- Notification sent
- Jul 6, 2021
- Affected individuals
- 1
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney GeneralWorking with the IRS to produce a list of all clients and their dependents
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 14 weeks(97 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.