HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancialMediumContained

Mark F. Andrews, CPA, LLC

bd_2541e9a89f09402d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 27, 2017

Filed

Aug 24, 2017

To disclose

8 weeks

Affected

9state residents only

Linked

2 filings

Confidence

67%

Full breach record for Mark F. Andrews, CPA, LLC →

Mark F. Andrews, CPA, LLC notified the NH AG that on June 27, 2017, it discovered unauthorized access to its tax software by an unknown third party. The incident potentially exposed PII, including names, SSNs, and tax info, for 9 NH residents. The firm engaged forensic experts, reset credentials, and offered 12 months of credit monitoring and identity theft protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 58 days

Jun 27, 2017

Discovered

Aug 24, 2017

Filed

vs. sector median

10 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_f8f7e8f3465c73602017-08-24Verified

Name: Wilson, Elser, Moskowitz, Edelman & Dicker LLP
norm: wilson elser moskowitz edelman dicker
Domain: wilsonelser.com

Name: Mark F. Andrews, CPA, LLC
norm: mark f andrews cpa
Industry: Professional Servicesllm

Discovered: Jun 27, 2017
Materiality determined: —
Notification sent: Aug 24, 2017
Affected individuals: 9state-resident count only
Data types: Identity (basic)Government IDFinancial
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the IRS
Initial access: valid_credentials

During the incident: Engaged computer experts to investigate
Contacted the IRS
Reviewed and revised policies and procedures
Enhanced the security protocols on third-party applications
Reset all access credentials
Changes made: Offered 12 months of credit and cyber scan monitoring
Provided $1,000,000 insurance reimbursement policy
Provided full managed identity theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGAug 24 · first

New Hampshire State AGAug 24 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/andrews-cpa-20170824.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 24, 2017
Raw hash: 07c4998819cc261521d48f5468dde21a69c467275e667d5b0e3ea6f9eeefbefa

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWilson, Elser, Moskowitz, Edelman & Dicker LLP

Victim entityMark F. Andrews, CPA, LLC

Incidentdiscovered Jun 27, 2017

Stated responseEngaged computer experts to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov