HackingProfessional ServicesFinancial ServicesProfessional ServicesCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIdentity (basic)Government IDFinancialMediumContained

Duben & Associates

bd_4fae307ae8631de0 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 26, 2020

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

75%

Full breach record for Duben & Associates →

Duben & Associates, Inc., a tax preparation firm, experienced an unauthorized system access on February 11, 2020. A forensic investigation concluded on May 7, 2020 that an unauthorized third party accessed the company's systems and may have acquired client personal information including that of primary filers, spouses, and dependents. The incident was detected due to a higher-than-normal rate of IRS e-file rejections for 2019 tax returns.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 11, 2020

Begins

May 26, 2020

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_17d709ff4dfea06f2020-05-26Verified
Montana State AGbd_437f008054189f272020-05-26Candidate

Name: Duben & Associates
norm: duben associates

Name: Duben & Associates
norm: duben associates
Industry: Professional ServicesllmFinancial Servicesllm

Discovered: —
Breach occurred: Feb 11, 2020
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDFinancial
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified the IRS

During the incident: Contacted our tax software company
Notified the IRS and commenced a prompt and thorough internal investigation
Worked very closely with external cybersecurity professionals to analyze our internal systems for any unusual or unauthorized activity
Continue to work with the IRS on this matter
Set up a dedicated and confidential toll-free response line to respond to questions
Changes made: Taken steps to prevent further unauthorized access to client records
Continually evaluate and modify our practices to enhance the security and privacy of our clients' information
Offering a one-year membership in myTrueIdentity provided by TransUnion Interactive
Offering complimentary 12-month credit monitoring service through TransUnion Interactive
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGMay 26 · first

Montana State AGMay 26 · first

California State AGMay 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-190369
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 26, 2020
Raw hash: 762c8c7a09db304e2e9d3eeb4f105cf643fd6b391d741149e6f5bb443152e3c8

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityDuben & Associates

Victim entityDuben & Associates

IncidentUnauthorized Access

Stated responseContacted our tax software company

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov