HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPIIMediumContained
Satty, Levine & Ciacco CPA's P.C.
bd_4b6b0478ad2704c0 · schema v1 · pii pii-v1
Full breach record for Satty, Levine & Ciacco CPA's P.C. →Satty, Levine & Ciacco CPA’s P.C. notified consumers of a data breach where an unauthorized party accessed a ShareFile account on February 27, 2024. The attacker downloaded tax preparation materials containing names, SSNs, driver's license numbers, and financial account information. The firm engaged forensic investigators, secured the account, and offered one year of Experian IdentityWorks credit monitoring. The incident is contained.
Vermont clock✗ VT AG >45 bday19 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_1eb9f6c16bea468dIndiana State AGfiled 2024-07-09Verified
- bd_3252d06f9142af95New Hampshire State AGfiled 2024-07-09Verified
- bd_a7783b16a4b3115dMaine State AGfiled 2024-07-09Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2024-07-09-satty-levine-ciacco-cpas-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 9, 2024
- Raw hash
- b6018b1e8afef6c404b024e3d1dcf85b672e5ca6a04013c07a865a96680d5439
Reporting entity
- Name
- Satty, Levine & Ciacco CPA's P.C.norm: satty levine ciacco cpa s
Victim entity
- Name
- Satty, Levine & Ciacco CPA's P.C.norm: satty levine ciacco cpa s
Incident
- Discovered
- Feb 27, 2024
- Materiality determined
- —
- Notification sent
- Jul 9, 2024
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed notice with Vermont Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 19 weeks(133 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.