HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumActive

Lindell & Associates, PC

bd_44ab0fb1b5eaabb1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 21, 2021

To disclose

—

Affected

185state residents only

Confidence

66%

Full breach record for Lindell & Associates, PC →

Lindell & Associates, PC notified clients of unauthorized network access between March 12 and April 9, 2021. The incident was triggered by IRS notices of fraudulent tax returns filed using client data. While the firm could not confirm data acquisition, it notified the FBI and IRS, enhanced encryption, and offered 24 months of Experian IdentityWorks to all clients.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 12, 2021

Begins

Jul 21, 2021

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed185 affectedView incident

Name: Lindell & Associates, PC
norm: lindell associates

Name: Lindell & Associates, PC
norm: lindell associates
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Mar 12, 2021 – Apr 9, 2021
Materiality determined: —
Notification sent: Jul 21, 2021
Affected individuals: 185state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the FBINotified the IRS
Initial access: valid_credentials

During the incident: Notified the FBI and will cooperate with any investigation
Notified the IRS and are working with them to implement preventative measures
Implemented additional security measures at our firm, including enhancing our existing data encryption capabilities and malware detection software
Changes made: Enhancing our existing data encryption capabilities
Enhancing malware detection software
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/a-notif-106.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2021
Raw hash: 94c0f9977fbd001003ba6222c86d19b193c1182b54d08dad87e177729dc41f4a

Reporting entityLindell & Associates, PC

Victim entityLindell & Associates, PC

IncidentUnauthorized Access

Stated responseNotified the FBI and will cooperate with any investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov