MalwareRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Kohler and Eyre, CPAs
bd_3b9463477cee36ef · schema v1 · pii pii-v1
Full breach record for Kohler and Eyre, CPAs →Kohler and Eyre CPA, LLP disclosed a ransomware attack on December 10, 2021, which encrypted systems and wiped backups. On January 9, 2022, the firm discovered files containing customer PII (names, SSNs, credit card info) were exfiltrated. Approximately 1% of system data contained personal identifiers. The firm secured systems, upgraded hardware/software, and offered 12 months of IDX identity protection to affected individuals.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_bf420b879916e383Delaware State AGfiled 2022-07-22Candidate
- bd_5bc126ae144d3075Maine State AGfiled 2022-08-29(38d gap)Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/09/Kohler-and-Eyre-All-States-Notice-Letter-Executed-147944109_1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 22, 2022
- Raw hash
- 783f15809af2c8a34cbf540d42320f1cc3826fa53de9dcfc0cdf134c44bdb7de
Reporting entity
- Name
- Kohler and Eyre, CPAsnorm: kohler and eyre cpas
Victim entity
- Name
- Kohler and Eyre, CPAsnorm: kohler and eyre cpas
Incident
- Discovered
- Dec 10, 2021
- Materiality determined
- —
- Notification sent
- Sep 14, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
Compliance
- Time to disclose
- 32 weeks(224 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.