HackingFinancial ServicesProfessional ServicesFinanceCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDHigh

Braverman CPA PC

bd_47513e1399dc33f5 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 22, 2020

Filed

Aug 11, 2021

To disclose

42 weeks

Affected · nationwide

6,53015 in this filing

Linked

6 filings

Confidence

65%

Full breach record for Braverman CPA PC →2 incidents on file

Braverman CPA PC, a financial services firm, experienced an external system breach on July 13, 2020, which was discovered on October 22, 2020. The incident affected 6,530 individuals, compromising names and Social Security numbers. The company notified affected individuals on August 6, 2021, and offered twelve months of credit monitoring and identity theft recovery services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Oct 22, 2020 → Filed with AG Aug 11, 2021293d ✗ ME AG >90d42 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 101 days

discovery → filing · 42 weeks / 293 days

Jul 13, 2020

Begins

Oct 22, 2020

Discovered

Aug 11, 2021

Filed

vs. sector median

+33 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_2a0357475e982ead2021-08-06 · +5dCandidate
Indiana State AGbd_3e7408ca37de85b42021-08-06 · +5dVerified
New Hampshire State AGbd_db17fb59ed6115202021-08-23 · +12dVerified
Massachusetts State AGbd_2dd6b9ad1780c07d2021-08-30 · +19dVerified

Show 1 more filing ↓up to 20d gap

Maine State AGbd_943c3b97e5def64f2021-08-31 · +20dVerified

Name: Braverman CPA PC
norm: braverman cpa

Name: Braverman CPA PC
norm: braverman cpa
Industry: Financial ServicesllmProfessional Servicesllm

Discovered: Oct 22, 2020
Breach occurred: Jul 13, 2020
Undetected for: 101 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 6, 2021
Affected individuals: 6,530state + nationwide
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Sent written notification to affected individuals
Offered identity theft protection services
Changes made: Twelve months of free credit and Cyberscan monitoring protection
A $1M insurance reimbursement policy
Managed ID theft recovery services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 42 weeks(293 days from discovery to filing)
Compliance flags: ME AG >90d · 293dME resident >180d · 288d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Oct 22, 2020
→ Filed with AG: Aug 11, 2021
293d 90 days ME AG >90d
Maine
Discovered: Oct 22, 2020
→ Notified: Aug 6, 2021
288d 180 days ME resident >180d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Oct 22, 2020 → Filed with AG: Aug 11, 2021	293d	90 days	ME AG >90d
Maine	Discovered: Oct 22, 2020 → Notified: Aug 6, 2021	288d	180 days	ME resident >180d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Montana State AGAug 6 · first

Indiana State AGAug 6 · first

Maine State AG+5d · this page

New Hampshire State AG+17d

Massachusetts State AG+24d

Maine State AG+25d

Pattern: first filing Aug 6 (MT), last Aug 31 (ME) — a 25-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d5d7d013-affa-4a1d-8bb4-219401781184.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 11, 2021
Raw hash: 9f1a46ad118e8a852ad3b0f9033ea46b3c3c88ceff4a537ce1d06556383a9e08

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityBraverman CPA PC

Victim entityBraverman CPA PC

Incidentdiscovered Oct 22, 2020

Stated responseSent written notification to affected individuals

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov