MalwareProfessional ServicesProfessional ServicesRansomwareData EncryptedTargetedIdentity (basic)Government IDFinancialMediumContained

Cary E. Williams CPA

bd_274a771d71276a2f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 29, 2018

Filed

Mar 2, 2018

To disclose

5 weeks

Affected

2state residents only

Confidence

66%

Full breach record for Cary E. Williams CPA →

Cary E. Williams CPA disclosed a ransomware attack discovered on Jan 29, 2018. Unauthorized access via RDP occurred Jan 5–Feb 2, 2018. Affected data included names, addresses, SSNs, and earnings info. The firm engaged forensic investigators, notified the FBI/IRS, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 24 days

discovery → filing · 5 weeks / 32 days

Jan 5, 2018

Begins

Jan 29, 2018

Discovered

Mar 2, 2018

Filed

vs. sector median

13 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Cary E. Williams CPA
norm: cary e williams cpa

Name: Cary E. Williams CPA
norm: cary e williams cpa
Industry: Professional Servicesllm

Discovered: Jan 29, 2018
Breach occurred: Jan 5, 2018 – Feb 2, 2018
Undetected for: 24 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1133 External Remote ServicesT1486 Data Encrypted for Impact
Threat actor: ExternalFinancial
Regulator citations: Notified the FBINotified the IRSNotified all three credit bureausNotified applicable state agencies
Initial access: external_remote_services

During the incident: Contacted IT consultant to stop migration and begin investigation
Ran deep scans and reviewed systems to identify potential malicious malware
Changed all system passwords
Hired a specialized forensic IT investigator
Notified the FBI, the IRS, all three credit bureaus, and applicable state agencies
Reviewed office procedures with IT consultant
Replaced impacted hard drives to eliminate malicious remnants
Offering Equifax’s Credit Watch Gold with WebDetect identity theft protection services for one year at no charge
Changes made: Replaced impacted hard drives to eliminate malicious remnants on our system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(32 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Cary-Williams-CPA.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 2, 2018
Raw hash: 5abae6f7af3f953926cec01a0f3799a56f1053b88cc4c435dd0807406259d6f3

Reporting entityCary E. Williams CPA

Victim entityCary E. Williams CPA

Incidentdiscovered Jan 29, 2018

Stated responseContacted IT consultant to stop migration and begin investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov