HackingData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Murray & Josephson, CPAs, LLC
bd_4b602336e640f2a0 · schema v1 · pii pii-v1
Full breach record for Murray & Josephson, CPAs, LLC →Murray & Josephson, CPAs, LLC experienced an external system breach (hacking) between June 8 and June 15, 2021, discovered on January 20, 2022. The incident compromised names and Social Security Numbers of 2,472 individuals, including 2 Maine residents. The firm notified affected individuals in writing on February 18, 2022, and provided 12 months of complimentary credit monitoring through Equifax.
Maine clockDiscovered Jan 20, 2022 → Filed with AG Feb 16, 202227d ✓ ME AG ≤30d27 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_edf8ac9b62c43f97Montana State AGfiled 2022-02-16Verified by operator
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/f4983ba7-bc2d-489b-8701-473a020ce211.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 16, 2022
- Raw hash
- 89298366700b77230aefd383f4f610819800294926b03353b775c44541d7dda1
Reporting entity
- Name
- Murray & Josephson, CPAs, LLCnorm: murray josephson cpas
- Industry
- Financial Services
Victim entity
- Name
- Murray & Josephson, CPAs, LLCnorm: murray josephson cpas
- Industry
- Financial Services
Incident
- Discovered
- Jan 20, 2022
- Materiality determined
- —
- Notification sent
- Feb 18, 2022
- Affected individuals
- 2,472
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 27 days(27 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 27d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jan 20, 2022→ Filed with AG: Feb 16, 202227d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.