HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Lionel LaSalle, II CPA

bd_3f3ee40f71c6fe03 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 31, 2019

Filed

Feb 28, 2019

To disclose

28 days

Affected

3state residents only

Linked

2 filings

Confidence

66%

Full breach record for Lionel LaSalle, II CPA →

Lionel LaSalle, II CPA notified NH AG of unauthorized network access between March-June 2018. Discovered Jan 31, 2019 via fraudulent tax filings. 3 NH residents affected. Data included names, SSNs, bank info. Response: forensic investigation, password resets, remote access protocols, credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 314 days

discovery → filing · 28 days

Mar 23, 2018

Begins

Jan 31, 2019

Discovered

Feb 28, 2019

Filed

vs. sector median

15 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_938c41b8344361bf2019-02-28Verified

Name: Lionel LaSalle, II CPA
norm: lionel lasalle ii cpa

Name: Lionel LaSalle, II CPA
norm: lionel lasalle ii cpa
Industry: Professional Servicesllm

Discovered: Jan 31, 2019
Breach occurred: Mar 23, 2018 – Jun 11, 2018
Undetected for: 314 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 28, 2019
Affected individuals: 3state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Hired an independent computer forensics firm to assist
Implemented additional security protocols for any remote access to LaSalle CPA’s system
Changed passwords to all employee accounts
Sent letters to its clients informing them of the data security incident
Offered free credit monitoring and identity theft protection services through ID Experts for two years
Provided customers with a toll-free number for any questions
Changes made: Implemented additional security protocols for any remote access to LaSalle CPA’s system
Changed passwords to all employee accounts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGFeb 28 · first

New Hampshire State AGFeb 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/lionelle-lasalle-20190228.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 28, 2019
Raw hash: 157ba4d13ca47642f27da1758d8a8087d12225f1e39ba40ba4807448ee6efe90

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityLionel LaSalle, II CPA

Victim entityLionel LaSalle, II CPA

Incidentdiscovered Jan 31, 2019

Stated responseHired an independent computer forensics firm to assist

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov