HackingProfessional ServicesProfessional ServicesDelayed DiscoveryData ExfiltratedIdentity (basic)Government IDPIIMediumContained

King McNamara Moriarty LLP

bd_3d913d4a4545a6f6 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 24, 2016

Filed

Feb 2, 2017

To disclose

14 weeks

Affected

3state residents only

Linked

3 filings

Confidence

66%

Full breach record for King McNamara Moriarty LLP →2 incidents on file

King McNamara Moriarty issued a supplemental breach notice for a hacking incident initially detected in June 2016 but re-investigated after suspicious activity was found on October 24, 2016. The breach compromised tax return information including names, addresses, DOBs, and SSNs. The firm engaged forensic investigators, notified the IRS, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 123 days

discovery → filing · 14 weeks / 101 days

Jun 23, 2016

Begins

Oct 24, 2016

Discovered

Feb 2, 2017

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_6f08f40c74739db12017-02-02Verified
New Hampshire State AGbd_2235d2060f80901e2017-02-01 · +1dVerified

Name: King McNamara Moriarty LLP
norm: king mcnamara moriarty

Name: King McNamara Moriarty LLP
norm: king mcnamara moriarty
Industry: Professional Servicesllm

Discovered: Oct 24, 2016
Breach occurred: Jun 23, 2016
Undetected for: 123 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 13, 2016
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the Internal Revenue e-File Services DepartmentNotified the Internal Revenue Service/Criminal Investigation (IRS/CI)
Initial access: exploit_public_facing

During the incident: Engaged a digital forensics firm to contain the matter
Notified the Internal Revenue e-File Services Department
Notified the Internal Revenue Service/Criminal Investigation (IRS/CI)
Offered credit and identity monitoring services for 12 months at no cost
Changes made: Enhancing the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(101 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGFeb 1 · first

Massachusetts State AG+1d

Montana State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/King-McNamara-Moriarty.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 2, 2017
Raw hash: 735fd0c7cc2019f477b078fa2369d9c3b05509434dcce9dd8eb00454eedeb901

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityKing McNamara Moriarty LLP

Victim entityKing McNamara Moriarty LLP

Incidentdiscovered Oct 24, 2016

Stated responseEngaged a digital forensics firm to contain the matter

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov