HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedPIIIdentity (basic)LowContained

PDL Pratt Associates LLC

bd_25940b61997332ac · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 30, 2025

Filed

Dec 30, 2025

To disclose

22 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

65%

Full breach record for PDL Pratt Associates LLC →

Pratt & Associates LLC, a tax and accounting firm, notified consumers of a data security incident. An unknown actor gained unauthorized access to an email account on July 29, 2025, potentially acquiring files containing personal information. The breach was contained, and an investigation with external experts was launched. The firm is offering complimentary credit monitoring and identity theft protection services through Epiq to affected individuals.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday22 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 1 days

discovery → filing · 22 weeks / 153 days

Jul 29, 2025

Begins

Jul 30, 2025

Discovered

Dec 30, 2025

Filed

vs. sector median

+3 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Nebraska State AGbd_11ffd3d9d1e484442025-12-30Verified
Indiana State AGbd_44c6cef4cbb2eeb62025-12-30Verified
Massachusetts State AGbd_7034964371816a3e2025-12-30Verified
Maine State AGbd_8af94f2c29f62a352025-12-30Verified

Show 1 more filing ↓

New Hampshire State AGbd_d0d4d6ccda09c9d12025-12-30Verified

Name: PDL Pratt Associates LLC
norm: pdl pratt associates

Name: PDL Pratt Associates LLC
norm: pdl pratt associates
Industry: Professional Servicesllm

Discovered: Jul 30, 2025
Breach occurred: Jul 29, 2025
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Dec 23, 2025
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Filed notice with the Office of the Vermont Attorney General
Initial access: valid_credentials

During the incident: Launched an investigation with the support of external cybersecurity experts
Took steps to secure our IT environment
Implementing enhanced security measures
Offering you the opportunity to enroll in complimentary credit monitoring and identity theft protection services through Epiq
Changes made: Implementing enhanced security measures to help prevent a similar incident from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 22 weeks(153 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Nebraska State AGDec 30 · first

Indiana State AGDec 30 · first

Massachusetts State AGDec 30 · first

Maine State AGDec 30 · first

New Hampshire State AGDec 30 · first

Vermont State AGDec 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2025-12-30-pratt-associates-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 30, 2025
Raw hash: 94ae372d4b31465a33712bb11e20bc12dd5f209ccc5fdf0a47e784cb9e7e31e9

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityPDL Pratt Associates LLC

Victim entityPDL Pratt Associates LLC

Incidentdiscovered Jul 30, 2025

Stated responseLaunched an investigation with the support of external cybersecurity experts

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov