HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Tami J. Dunham, CPA

bd_67946750d4824c2a · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 24, 2025

Filed

Nov 26, 2025

To disclose

27 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for Tami J. Dunham, CPA →

Tami J. Dunham, CPA identified suspicious activity on its network in late May 2025. An investigation determined that an unknown actor viewed and downloaded files between May 24 and May 26, 2025. The compromised data included names and potentially Social Security numbers. The firm engaged cybersecurity specialists, reviewed policies, enhanced controls, changed its external IT firm, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 27 weeks / 186 days

May 24, 2025

Begins

May 24, 2025

Discovered

Nov 26, 2025

Filed

vs. sector median

+7 wks slower

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_1785f2e4a0a5189f2025-11-26Verified
Maine State AGbd_3977ffba57ce2eea2025-11-26Candidate
Nebraska State AGbd_c0e9c7d2f05b25f22025-11-26Verified

Name: Tami J. Dunham, CPA
norm: tami j dunham cpa

Name: Tami J. Dunham, CPA
norm: tami j dunham cpa
Industry: Professional Servicesllm

Discovered: May 24, 2025
Breach occurred: May 24, 2025 – May 26, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Undertook an extensive investigation with the assistance of cybersecurity specialists
Conducted a comprehensive analysis of the affected files with the assistance of third-party data review specialists
Undertook a time-intensive manual review of the records to validate the information
Reviewed existing policies and procedures
Enhanced certain administrative and technical controls
Changed external IT firm
Offering complimentary credit monitoring and identity restoration services through Epiq
Changes made: Reviewed existing policies and procedures
Enhanced certain administrative and technical controls
Changed external IT firm to reduce the likelihood of a similar future event
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(186 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGNov 26 · first

Maine State AGNov 26 · first

Nebraska State AGNov 26 · first

California State AGNov 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-614832
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 26, 2025
Raw hash: ad75377d3515df2660948bf63e9c11a415d7cffbd30298c4b91269825619cf39

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityTami J. Dunham, CPA

Victim entityTami J. Dunham, CPA

Incidentdiscovered May 24, 2025

Stated responseUndertook an extensive investigation with the assistance of cybersecurity specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov