HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedWire FraudIdentity (basic)Government IDFinancialMediumContained

Romanazzi & Associates

bd_280cba36e16cb9f9 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 22, 2020

Filed

Aug 4, 2020

To disclose

15 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Romanazzi & Associates →

Romanazzi & Associates, a CPA firm, experienced a data breach involving client tax information. On April 22, 2020, the firm discovered fraudulent tax returns had been filed for clients. Investigation revealed suspicious activity on a workstation where tax software information was captured. Affected data included names, addresses, Social Security numbers, and tax filing information. The firm secured systems, notified law enforcement and the IRS, and offered credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 6 days

discovery → filing · 15 weeks / 104 days

Apr 16, 2020

Begins

Apr 22, 2020

Discovered

Aug 4, 2020

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Romanazzi & Associates
norm: romanazzi associates

Name: Romanazzi & Associates
norm: romanazzi associates
Industry: Professional Servicesllm

Discovered: Apr 22, 2020
Breach occurred: Apr 16, 2020
Undetected for: 6 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified IRSNotified state tax agenciesNotified local policeNotified FBI

During the incident: Contacted tax software vendor and IRS
Contacted local police and FBI offices
Engaged IT professionals to perform a scan and analysis of our system
Secured access to systems and tax software
Set in place with the IRS an Opt-In system to keep fraudulent returns from processing
Notified state tax agencies and law enforcement officials
Made immediate enhancements to systems, security and practices
Engaged appropriate experts to assist in conducting a full review of security practices and systems
Changes made: Made immediate enhancements to systems, security and practices
Engaged appropriate experts to assist in conducting a full review of security practices and systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(104 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-192715
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 4, 2020
Raw hash: 5986602beae8afd6bbe899eb1bd6beb9439251884c02b959028280445552b06d

Reporting entityRomanazzi & Associates

Victim entityRomanazzi & Associates

Incidentdiscovered Apr 22, 2020

Stated responseContacted tax software vendor and IRS

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov