MalwareGovernment IDIdentity (basic)Financial accountMediumContained

David Mills CPA, LLC

bd_42e972018d187995 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Apr 13, 2025

Filed

Jun 17, 2025

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for David Mills CPA, LLC →

David Mills, CPA, LLC reported a cybersecurity incident in Nebraska on June 17, 2025. The breach occurred around April 8, 2025, and was discovered on April 13, 2025, when the firm lost access to its file server and tax application. The incident involved unauthorized viewing and copying of personal data, including Social Security numbers, dates of birth, and banking information. The firm engaged forensic investigators and legal counsel, and is offering 12 months of credit monitoring and fraud assistance to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

Incident timeline

undetected · 5 days

Apr 8, 2025

Begins

Apr 13, 2025

Discovered

Jun 17, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

A leak claim by lynx about this victim predates this filing by 49 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelynxbd_d30d290ec43ad6922025-04-28 · +49dCandidate

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_58a0d16bcb02687a2025-06-17Verified

Name: David Mills CPA, LLC
norm: david mills cpa
Domain: dmillscpa.com

Name: David Mills CPA, LLC
norm: david mills cpa
Domain: dmillscpa.com

Discovered: Apr 13, 2025
Breach occurred: Apr 8, 2025
Undetected for: 5 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 17, 2025
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial

During the incident: Engaged a forensics company
Retained legal counsel
Provided access to Single Bureau Credit Monitoring services at no charge
Provided proactive fraud assistance through Cyberscout
Changes made: Provided 12 months of Single Bureau Credit Monitoring services
Provided proactive fraud assistance
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGJun 17 · first

Nebraska State AGJun 17 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/f733a50c-364a-4325-92e1-cb49c94f8831.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 17, 2025
Raw hash: d6753ac2ee68a38ce7a7e82dac38257cfd34ba5d7d6f0fcdd3de48c3ff84fea5

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityDavid Mills CPA, LLC

Victim entityDavid Mills CPA, LLC

Incidentdiscovered Apr 13, 2025

Stated responseEngaged a forensics company

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov