Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainGovernment IDIdentity (basic)Financial accountPIIMediumContained

Platt, Miller & Jacobs, CPAs, LLP

bd_5f27ed4d4da2d8d8 · schema v1 · pii pii-v2

Severity

Medium

Discovered

Mar 11, 2026

Filed

Sep 1, 2026

To disclose

—

Affected

2state residents only

Confidence

66%

Full breach record for Platt, Miller & Jacobs, CPAs, LLP →

Platt, Miller & Jacobs, CPAs, LLP notified clients that an unauthorized user accessed an employee's Microsoft Outlook email account on March 10, 2026, and sent phishing emails to clients. The firm discovered the incident on March 11, 2026. Affected data includes SSNs, driver's licenses, financial account information, and other PII. The firm engaged third-party IT specialists, notified law enforcement (FBI, IRS, Secret Service), and is providing 18 months of identity monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

Mar 10, 2026

Begins

Mar 11, 2026

Discovered

Sep 1, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Platt, Miller & Jacobs, CPAs, LLP
norm: platt miller jacobs cpas

Name: Platt, Miller & Jacobs, CPAs, LLP
norm: platt miller jacobs cpas
Industry: Professional Servicesllm

Discovered: Mar 11, 2026
Breach occurred: Mar 10, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Sep 28, 2026
Affected individuals: 2state-resident count only
Data types: Government IDIdentity (basic)Financial accountPII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified the FBI, IRS, and Secret Service
Initial access: phishing_link

During the incident: Began an investigation with the assistance of third-party IT specialists
Notified the FBI, IRS, and Secret Service
Implemented additional security measures to further protect our network
Increased employee training to maintain awareness of potential phishing attempts
Placed stringent restrictions on system access
Providing Identity Monitoring Services for 18 months at no cost
Changes made: Implemented additional security measures to further protect our network and reduce the risk of a similar incident occurring in the future
Increased employee training to maintain awareness of potential phishing attempts
Placed stringent restrictions on system access
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1651-platt-miller-jacobs-cpas-llp/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2026
Raw hash: f55ece395c2dfc263aff2efa20a58732a941390ce942a5a07d08257d9a21244d

Reporting entityPlatt, Miller & Jacobs, CPAs, LLP

Victim entityPlatt, Miller & Jacobs, CPAs, LLP

Incidentdiscovered Mar 11, 2026

Stated responseBegan an investigation with the assistance of third-party IT specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov