HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Calibre CPA Group

bd_469bb67cd6efc5df · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 9, 2019

To disclose

—

Affected

553state residents only

Linked

6 filings

Confidence

66%

Full breach record for Calibre CPA Group →2 incidents on file

Calibre CPA Group experienced unauthorized access to employee email accounts and a server between March 11, 2019, and May 7, 2019. The incident affected 553 California residents, exposing personal information including names, Social Security numbers, financial account details, driver's license numbers, and medical information. Calibre engaged forensic experts, reset passwords, implemented dual-factor authentication, and provided two years of identity monitoring services through Kroll. The investigation is ongoing, but the incident is considered contained.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 11, 2019

Begins

Sep 9, 2019

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

New Hampshire State AGbd_c9b305f10e4fa56f2019-09-10 · +1dVerified
Massachusetts State AGbd_80543e862f2dd7672019-08-26 · +14dCandidate
Montana State AGbd_fda5cc6a136f7ac92019-08-26 · +14dVerified
HHS OCRbd_b7b0c8592bb421c42019-09-27 · +18dVerified

Show 1 more filing ↓up to 31d gap

Washington State AGbd_66ae17adab8607d62019-10-10 · +31dVerified

Name: Calibre CPA Group
norm: calibre cpa

Name: Calibre CPA Group
norm: calibre cpa
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Mar 11, 2019 – May 7, 2019
Materiality determined: —
Notification sent: Sep 9, 2019
Affected individuals: 553state-resident count only
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Provided relevant regulatory notices

During the incident: Launched an investigation to determine the full nature and scope of the activity
Engaged computer forensics experts
Resetting passwords for Calibre email accounts
Notified law enforcement
Provided relevant regulatory notices
Changes made: Implementation of dual factor authentication to gain access to our systems
Scans of emails automatically directed to system drives instead of emails
Additional employee training
Vulnerability studies
Specific cyber-security comprehensive evaluations
Providing access to identity and credit monitoring services for two (2) years, through Kroll
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Massachusetts State AGAug 26 · first

Montana State AGAug 26 · first

California State AG+14d · this page

New Hampshire State AG+15d

HHS OCR+32d

Washington State AG+45d

Pattern: first filing Aug 26 (MA), last Oct 10 (WA) — a 45-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-150374
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 9, 2019
Raw hash: 62929b540039059ebde2d7797998f9e53f514dd44e824fa03711af5bbf29fe18

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityCalibre CPA Group

Victim entityCalibre CPA Group

IncidentUnauthorized Access

Stated responseLaunched an investigation to determine the full nature and scope of the activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov