Social EngineeringIdentity (basic)Government IDMediumContained

Adams Samartino & Co., PC

bd_4d07fac41480d97e · schema v1 · pii pii-v2

Severity

Medium

Discovered

Mar 6, 2025

Filed

Aug 29, 2025

To disclose

—

Affected

Not disclosed

Linked

5 filings

Confidence

66%

Full breach record for Adams Samartino & Co., PC →

Adams Samartino & Co., PC notified affected individuals in August 2025 regarding a March 2025 incident where an unauthorized party accessed an employee's email account. The breach potentially exposed names and government identifiers (SSN, DOB, driver's license). The firm secured the account, engaged third-party investigators, implemented technical safeguards, and offered complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 6, 2025

Discovered

Aug 29, 2025

Filed

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Maine State AGbd_1509982b30e3f2582025-08-29Candidate
Vermont State AGbd_89199f84d4abb2352025-08-29Verified
Massachusetts State AGbd_f12f9749ae5adf462025-08-30 · +1dVerified
New Hampshire State AGbd_b8d16b8e918065162025-09-02 · +4dVerified

Name: Adams Samartino & Co., PC
norm: adams samartino

Name: Adams Samartino & Co., PC
norm: adams samartino

Discovered: Mar 6, 2025
Materiality determined: —
Notification sent: Aug 29, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: External
Initial access: phishing_link

During the incident: Secured the email account
Engaged a team of third-party specialists to investigate the incident
Implemented additional technical safeguards
Offering 12 months / 24 months of complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information in its possession and to prevent similar incidents from happening in the future
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 5 filings · 5 states

View merged incident ↗

Maine State AGAug 29 · first

Vermont State AGAug 29 · first

Nebraska State AGAug 29 · first · this page

Massachusetts State AG+1d

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/df815901-98ae-4460-9d88-0359ed4598d1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 29, 2025
Raw hash: 2c8ef470049b23f4c2fdc2574d9f80c235447a01f8c61e3e14d8ba87b334caa4

Linked disclosures

Regulatory filings (4) · sorted by filing gap

Reporting entityAdams Samartino & Co., PC

Victim entityAdams Samartino & Co., PC

Incidentdiscovered Mar 6, 2025

Stated responseSecured the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov