PhysicalProfessional ServicesProfessional ServicesTheftCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

Hillary Tentler, CPA

bd_2e8f8deadd94c84c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 4, 2016

Filed

Nov 29, 2016

To disclose

25 days

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Hillary Tentler, CPA →

Hillary Tentler, CPA reported a physical break-in at her home on November 4, 2016, resulting in the theft of three backup hard drives containing client data. The stolen data included names, dates of birth, addresses, social security numbers, employment (W-2) information, 1099 information, and direct deposit bank account details. One drive was recovered. The firm notified law enforcement, state attorneys general, and credit bureaus, and offered one year of identity theft protection via Equifax.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 4, 2016 → Notified Nov 21, 201617d ✓ CA 60-day OK25 days discovery → filing

Incident timeline

discovery → filing · 25 days

Nov 4, 2016

Begins

Nov 4, 2016

Discovered

Nov 29, 2016

Filed

vs. sector median

15 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_cc97c3365df983482016-11-23 · +6dVerified

Name: Hillary Tentler, CPA
norm: hillary tentler cpa

Name: Hillary Tentler, CPA
norm: hillary tentler cpa
Industry: Professional Servicesllm

Discovered: Nov 4, 2016
Breach occurred: Nov 4, 2016 – Nov 4, 2016
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 21, 2016
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Threat actor: External
Regulator citations: Notified the Santa Barbara County Sheriff’s officeNotifying the offices of the applicable State Attorney Generals

During the incident: Notified the Santa Barbara County Sheriff’s office and a police report was filed
Reviewed office policies and procedures
Hired an IT consultant for security recommendations
Implemented new cloud storage software for data
Erased hard drive backups
Notifying the offices of the applicable State Attorney Generals
Notifying the three credit bureaus
Changes made: Implemented new cloud storage software for data
Erased hard drive backups and will no longer be used
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 25 days(25 days from discovery to filing)
Compliance flags: CA 60-day OK · 17d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 4, 2016
→ Notified: Nov 21, 2016
17d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 4, 2016 → Notified: Nov 21, 2016	17d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGNov 23 · first

California State AG+6d · this page

Pattern: first filing Nov 23 (MA), last Nov 29 (CA) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-65118
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 29, 2016
Raw hash: 14dc80e84cb1eda53879f8a4eafef945fa466601aba5b7e875338333e7e3cddb

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHillary Tentler, CPA

Victim entityHillary Tentler, CPA

Incidentdiscovered Nov 4, 2016

Stated responseNotified the Santa Barbara County Sheriff’s office and a police report was filed

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov