HackingStolen CredentialsData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Sanders Walsh Eaton CPAs LLC
bd_4fbbc82cedd73699 · schema v1 · pii pii-v1
Full breach record for Sanders Walsh Eaton CPAs LLC →Sanders Walsh & Eaton CPAs LLC disclosed a data breach occurring on March 13, 2025, where an unauthorized actor accessed systems and exfiltrated personal data for less than four hours. Affected data included names combined with government identifiers (e.g., SSNs). The firm engaged Kroll to provide credit monitoring and identity theft restoration services and reported the incident to law enforcement and the IRS.
Vermont clock✗ VT AG >45 bday17 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_fac69dd5111a8db5Maine State AGfiled 2025-06-26(11d gap)Candidate
Source provenance
- Source URL
- https://ago.vermont.gov/document/2025-07-07-sanders-walsh-eaton-cpas-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 7, 2025
- Raw hash
- 04955dd2371bc4ce2b7c69d708ba430e670141743eb3be03b89cffda2b4375e4
Reporting entity
- Name
- Sanders Walsh Eaton CPAs LLCnorm: sanders walsh eaton cpas
Victim entity
- Name
- Sanders Walsh Eaton CPAs LLCnorm: sanders walsh eaton cpas
Incident
- Discovered
- Mar 13, 2025
- Materiality determined
- —
- Notification sent
- Jul 7, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported the matter to the IRS
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 17 weeks(116 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.