DisclosureLens
HackingProfessional ServicesProfessional ServicesSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

L.D. Evans, CPA

bd_2a43da1159c3f0aa · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 4, 2019

Filed

Apr 16, 2019

To disclose

6 weeks

Affected

631state residents only

Confidence

66%
Full breach record for L.D. Evans, CPA →

L.D. Evans, CPA notified the California Attorney General of a potential data breach affecting approximately 631 California residents. On March 4, 2019, the firm learned from Citrix that an unauthorized third party accessed their ShareFile service, potentially compromising names, addresses, dates of birth, Social Security numbers, and bank account information. The breach occurred on November 23, 2018. The firm conducted an internal investigation, enhanced security protocols, and offered 12 months of credit monitoring to affected individuals.

California clockDiscovered Mar 4, 2019 → Notified Apr 16, 201943d ✓ CA 60-day OK6 weeks discovery → filing

Incident timeline

undetected · 101 days
discovery → filing · 6 weeks / 43 days

Nov 23, 2018

Begins

Mar 4, 2019

Discovered

Apr 16, 2019

Filed

vs. sector median

13 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed631 affectedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.