HackingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIALMediumContained
Squar Milner LLP
bd_50f0fe9db67c7d28 · schema v1 · pii pii-v1
Full breach record for Squar Milner LLP →Squar Milner LLP experienced a data breach where credentials required to access a client tax return system were compromised. The incident was discovered on March 25, 2020, with the breach date listed as February 5, 2020. Affected data included names, addresses, Social Security numbers, Tax ID numbers, and prior IRS/state tax filing information. The firm secured the system, notified the FBI, CFTB, and IRS, and offered 12 months of credit monitoring and identity theft restoration services to affected individuals.
California clockDiscovered Mar 25, 2020 → Notified Apr 17, 202023d ✓ CA 60-day OK23 days discovery → filing
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_89da37e43d823fe1Montana State AGfiled 2020-04-17Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-189263
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2020
- Raw hash
- 416cd8cb75ccb928bb86a2a878f20fd96f21647b5bf7c67560e95fb24b39a8d7
Reporting entity
- Name
- Squar Milner LLPnorm: squar milner
Victim entity
- Name
- Squar Milner LLPnorm: squar milner
Incident
- Discovered
- Mar 25, 2020
- Materiality determined
- —
- Notification sent
- Apr 17, 2020
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the Federal Bureau of InvestigationNotified the California Franchise Tax BoardNotified the Internal Revenue Service
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 23 days(23 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 23d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Mar 25, 2020→ Notified: Apr 17, 202023d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.