Social EngineeringProfessional ServicesProfessional ServicesPhishingBECCustomer Data InvolvedEmployee Data InvolvedGovernment IDFinancial accountFinancial credentialsMediumContained

Eshel, Aminov & Partners LLP

bd_35c1b57104e58847 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 20, 2019

Filed

Jul 8, 2020

To disclose

14 months

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for Eshel, Aminov & Partners LLP →

Eshel, Aminov & Partners LLP experienced a business email compromise (BEC) resulting from a phishing scheme. An external attacker gained unauthorized access to employee email accounts between March 10, 2019, and May 20, 2019. The firm discovered the incident on May 20, 2019. Potentially compromised data includes Social Security numbers, financial and payment card numbers, access codes, PINs, and tax-related information. The firm states there is no evidence that data was actually viewed or acquired. Remediation steps included resetting credentials, enhancing email security, and establishing a secure client portal. Affected individuals were offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 71 days

discovery → filing · 14 months / 415 days

Mar 10, 2019

Begins

May 20, 2019

Discovered

Jul 8, 2020

Filed

vs. sector median

+41 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_18132ad5b5c711f42020-07-08Verified
Massachusetts State AGbd_4c7c4452dee5c8442020-07-08Verified
New Hampshire State AGbd_b717f01cfc9995312020-07-08Verified

Name: Eshel, Aminov & Partners LLP
norm: eshel aminov
Domain: eshelcpa.com

Name: Eshel, Aminov & Partners LLP
norm: eshel aminov
Domain: eshelcpa.com
Industry: Professional Servicesllm

Discovered: May 20, 2019
Breach occurred: Mar 10, 2019 – May 20, 2019
Undetected for: 71 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDFinancial accountFinancial credentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: phishing_link

During the incident: Resetting employees’ access credentials to ensure our systems are secure
Implementing additional layers of security to our email platform
Reviewing the way that confidential information is transmitted within the firm
Established a new “client portal” for the secure transfer of data
Arranged for complimentary, online credit monitoring service (myTrueIdentity) for one year provided by TransUnion Interactive
Changes made: Resetting employees’ access credentials to ensure our systems are secure
Implementing additional layers of security to our email platform
Reviewing the way that confidential information is transmitted within the firm
Established a new “client portal” for the secure transfer of data
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 months(415 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGJul 8 · first

Massachusetts State AGJul 8 · first

New Hampshire State AGJul 8 · first

California State AGJul 8 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-191815
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 8, 2020
Raw hash: 0b0f09e27f39bb8b6effc240c8ca94db7df22456509c2f848507f7801b440f42

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityEshel, Aminov & Partners LLP

Victim entityEshel, Aminov & Partners LLP

Incidentdiscovered May 20, 2019

Stated responseResetting employees’ access credentials to ensure our systems are secure

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov