HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Caputo & Associates
bd_280cba36e16cb9f9 · schema v1 · pii pii-v1
Full breach record for Caputo & Associates →Romanazzi & Associates, a tax preparation firm, disclosed a data breach on April 22, 2020, involving fraudulent tax returns filed for clients. The incident resulted from unauthorized access to a workstation, leading to the capture of tax software information. Impacted data included names, addresses, Social Security numbers, and tax filing details. The firm engaged IT professionals, law enforcement, and the IRS, implemented system enhancements, and offered 12 months of credit and cyber monitoring services to affected individuals.
California clockDiscovered Apr 22, 2020 → Notified Apr 22, 20200d ✓ CA 60-day OK15 weeks discovery → filing
⚠ notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-192715
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 4, 2020
- Raw hash
- 5986602beae8afd6bbe899eb1bd6beb9439251884c02b959028280445552b06d
Reporting entity
- Name
- Caputo & Associatesnorm: caputo associates
- Domain
- cacpas.org
Victim entity
- Name
- Caputo & Associatesnorm: caputo associates
- Domain
- cacpas.org
Incident
- Discovered
- Apr 22, 2020
- Materiality determined
- —
- Notification sent
- Apr 22, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Internal Revenue ServiceNotified state tax agenciesNotified local police and FBI offices
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 15 weeks(104 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 0d
- Discovery-date grounding
- notification dateThe stored discovery date equals the NOTIFICATION date, collapsing the clock to ~zero. This UNDERSTATES the delay and can mask a real violation.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 22, 2020→ Notified: Apr 22, 20200d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.