HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICMediumContained
Bender & Company, CPAs, P.C.
bd_38ac5b26f7cb93df · schema v1 · pii pii-v1
Full breach record for Bender & Company, CPAs, P.C. →Bender & Company, CPAs, P.C. notified Maryland AG of unauthorized access to an employee email account between June 21 and July 3, 2024. The incident potentially exposed the names, SSNs, and medical diagnosis/treatment info of 4 Maryland residents. Bender engaged forensic specialists, secured systems, and offered 12 months of credit monitoring to affected individuals.
Maryland clock✗ MD AG >90d31 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_a02e69e7c19f8782Montana State AGfiled 2025-02-07Candidate
- bd_d5a0cc891b6bd5d4Indiana State AGfiled 2025-02-07Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376334.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 7, 2025
- Raw hash
- f8af33ce974f4d6db9f7735b3202b11cc2badab03d186f07d5427d342391fc3a
Reporting entity
- Name
- Ciprianinorm: cipriani
- Domain
- cipriani.com
Victim entity
- Name
- Bender & Company, CPAs, P.C.norm: bender company cpas
Incident
- Discovered
- Jul 3, 2024
- Materiality determined
- —
- Notification sent
- Feb 7, 2025
- Affected individuals
- 4
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified Maryland Office of the Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 31 weeks(219 days from discovery to filing)
- Compliance flags
- MD AG >90d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.