Social EngineeringPhishingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSMediumContained
Eshel, Aminov & Partners LLP
bd_35c1b57104e58847 · schema v1 · pii pii-v1
Full breach record for Eshel, Aminov & Partners LLP →Eshel, Aminov & Partners LLP reported a business email compromise incident occurring between March 10, 2019, and May 20, 2019. Attackers gained access to employee email accounts via a phishing scheme. The firm notified clients that their personal information, including SSNs, financial account numbers, and tax-related data, may have been accessed. No evidence of actual fraud or misuse was found. The firm reset credentials, enhanced email security, and provided one year of complimentary credit monitoring via TransUnion.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-191815
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 8, 2020
- Raw hash
- 0b0f09e27f39bb8b6effc240c8ca94db7df22456509c2f848507f7801b440f42
Reporting entity
- Name
- Eshel, Aminov & Partners LLPnorm: eshel aminov
- Domain
- eshelcpa.com
- Industry
- professional_services
Victim entity
- Name
- Eshel, Aminov & Partners LLPnorm: eshel aminov
- Domain
- eshelcpa.com
- Industry
- professional_services
Incident
- Discovered
- May 20, 2019
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALS
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 14 months(415 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.