HackingProfessional ServicesProfessional ServicesStolen CredentialsBECCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumActive

SCHULZ & ASSOCIATES PC

bd_4b90457bdbf10b9d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 28, 2022

Filed

Apr 4, 2022

To disclose

5 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for SCHULZ & ASSOCIATES PC →

Schulz & Associates, P.C. notified clients in Montana of a data breach discovered in late February 2022 involving unauthorized access to tax customer data. Fraudulent tax returns were filed using accessed PII, including SSNs and financial account details. The firm engaged legal counsel and forensic specialists.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 35 days

Feb 28, 2022

Discovered

Apr 4, 2022

Filed

vs. sector median

12 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_a34838b5a65b802d2022-04-04Verified
Indiana State AGbd_ceeae5c08ebcb09c2022-04-04Verified

Name: SCHULZ & ASSOCIATES PC
norm: schulz associates
Domain: schulzcpas.com

Name: SCHULZ & ASSOCIATES PC
norm: schulz associates
Domain: schulzcpas.com
Industry: Professional Servicesllm

Discovered: Feb 28, 2022
Materiality determined: —
Notification sent: Apr 4, 2022
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Retained outside consultants and legal counsel
Examining systems and processes
Working closely with outside specialists
Implemented additional security measures
Changes made: Implemented additional security measures designed to prevent a recurrence
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(35 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGApr 4 · first

Indiana State AGApr 4 · first

Montana State AGApr 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-290.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 4, 2022
Raw hash: 7d4318ddc2b4275f205557906f78878c435ffc6b473efe0b5e14b3fd7c4c20c8

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySCHULZ & ASSOCIATES PC

Victim entitySCHULZ & ASSOCIATES PC

Incidentdiscovered Feb 28, 2022

Stated responseRetained outside consultants and legal counsel

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov