Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

Braverman CPA PC

bd_2a0357475e982ead · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 22, 2020

Filed

Aug 6, 2021

To disclose

41 weeks

Affected

14state residents only

Linked

6 filings

Confidence

66%

Full breach record for Braverman CPA PC →2 incidents on file

Braverman CPA PC notified Montana residents of a data breach involving a compromised email account. The incident, discovered on October 22, 2020, exposed names, SSNs, and financial account information. The firm improved email security and offered identity theft protection services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 41 weeks / 288 days

Oct 22, 2020

Discovered

Aug 6, 2021

Filed

vs. sector median

+23 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_3e7408ca37de85b42021-08-06Verified
Maine State AGbd_47513e1399dc33f52021-08-11 · +5dVerified
New Hampshire State AGbd_db17fb59ed6115202021-08-23 · +17dVerified
Massachusetts State AGbd_2dd6b9ad1780c07d2021-08-30 · +24dVerified

Show 1 more filing ↓up to 25d gap

Maine State AGbd_943c3b97e5def64f2021-08-31 · +25dVerified

Name: Braverman CPA PC
norm: braverman cpa

Name: Braverman CPA PC
norm: braverman cpa
Industry: Professional Servicesllm

Discovered: Oct 22, 2020
Materiality determined: —
Notification sent: Aug 6, 2021
Affected individuals: 14state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Improved the data security and the security of our email system
Offering identity theft protection services through IDX
Offering 12/24 months of credit and CyberScan monitoring
Offering a $1,000,000 insurance reimbursement policy
Offering fully managed ID theft recovery services
Changes made: Improved the data security and the security of our email system
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 41 weeks(288 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Indiana State AGAug 6 · first

Montana State AGAug 6 · first · this page

Maine State AG+5d

New Hampshire State AG+17d

Massachusetts State AG+24d

Maine State AG+25d

Pattern: first filing Aug 6 (IN), last Aug 31 (ME) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/notificationLetter-50.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 6, 2021
Raw hash: b99340cb780617a74544fb763b88aab485e115a9c32f5b4432e77152d7fe5830

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityBraverman CPA PC

Victim entityBraverman CPA PC

Incidentdiscovered Oct 22, 2020

Stated responseImproved the data security and the security of our email system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov