HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedPIILowContained
New Jersey Society of Certified Public Accountants
bd_1fa704e043c62e11 · schema v1 · pii pii-v1
Full breach record for New Jersey Society of Certified Public Accountants →New Jersey Society of Certified Public Accountants (NJCPA) reported a cybersecurity incident to the New Hampshire Attorney General. Unauthorized access occurred between February 11 and 17, 2025, involving an unauthorized party accessing the network. The incident affected 2,568 individuals nationwide, including 3 New Hampshire residents. Compromised data included PII. NJCPA engaged forensic investigators, reset credentials, notified law enforcement, and provided credit monitoring services.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_605dba5d044c48c9Indiana State AGfiled 2025-09-03Verified
- bd_ddba7b9b3a190f99Maine State AGfiled 2025-09-03Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/new-jersey-society-certified-public-accountants-20250903.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 3, 2025
- Raw hash
- 8b42d6d2e3190a3dad3a6b1d96f3239cb0a4cf472d1017c0cfeba85ee7b30267
Reporting entity
- Name
- Wilson, Elser, Moskowitz, Edelman & Dicker LLPnorm: wilson elser moskowitz edelman dicker
Victim entity
- Name
- New Jersey Society of Certified Public Accountantsnorm: new jersey society of certified public accountants
Incident
- Discovered
- Feb 17, 2025
- Materiality determined
- —
- Notification sent
- Sep 3, 2025
- Affected individuals
- 3
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General Consumer Protection Bureau
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 28 weeks(198 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.