HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancialHighResolved

Rutherford, MacDonald & Olson P.C.

bd_5f41a305d8808cd9 · schema v1 · pii pii-v1

Severity

High

Discovered

Apr 1, 2017

Filed

Aug 23, 2017

To disclose

21 weeks

Affected

5,269state residents only

Linked

2 filings

Confidence

65%

Full breach record for Rutherford, MacDonald & Olson P.C. →

Rutherford, MacDonald & Olson, P.C., a Montana CPA firm, disclosed unauthorized online access to its server in March-April 2017. The breach exposed client tax return data including SSNs, names, addresses, and phone numbers. The firm notified affected individuals, law enforcement, and the IRS, and provided 12 months of identity protection services via AllClear ID.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 31 days

discovery → filing · 21 weeks / 144 days

Mar 1, 2017

Begins

Apr 1, 2017

Discovered

Aug 23, 2017

Filed

vs. sector median

+3 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_addfe379bc2f340f2017-08-23Verified

Name: Rutherford, MacDonald & Olson P.C.
norm: rutherford macdonald olson
Domain: rmo-pc.com

Name: Rutherford, MacDonald & Olson P.C.
norm: rutherford macdonald olson
Domain: rmo-pc.com
Industry: Professional Servicesllm

Discovered: Apr 1, 2017
Breach occurred: Mar 1, 2017 – Apr 30, 2017
Undetected for: 31 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 23, 2017
Affected individuals: 5,269state-resident count only
Data types: Identity (basic)Government IDFinancial
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified law enforcementNotified the United States Internal Revenue Service
Initial access: exploit_public_facing

During the incident: Notified all individuals affected
Notified law enforcement
Notified the United States Internal Revenue Service
Engaged AllClear ID to protect your identity for 12 months at no cost
Changes made: Engaged AllClear ID to protect your identity for 12 months at no cost
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 weeks(144 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGAug 23 · first

Montana State AGAug 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Rutherford-MacDonald-Olson.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 23, 2017
Raw hash: 41a630263e4a301784c82d39fac607ef968433497aede59a4faba0cbd7b8c6cb

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityRutherford, MacDonald & Olson P.C.

Victim entityRutherford, MacDonald & Olson P.C.

Incidentdiscovered Apr 1, 2017

Stated responseNotified all individuals affected

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov