HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)Government IDMediumContained

Calibre CPA Group, PLLC

bd_6eaf8b18f0e2c7cb · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 11, 2019

Filed

Aug 28, 2019

To disclose

24 weeks

Affected

3state residents only

Confidence

66%

Calibre CPA Group, PLLC notified Montana residents of unauthorized access to employee email accounts and a computer server between March 11 and May 7, 2019. The incident involved the compromise of valid credentials. Personal information, including names and government IDs, was potentially accessible. Calibre engaged forensic experts, notified law enforcement, and offered two years of identity monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 24 weeks / 170 days

Mar 11, 2019

Begins

Mar 11, 2019

Discovered

Aug 28, 2019

Filed

vs. sector median

+6 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3 affectedView incident

Name: Calibre CPA Group, PLLC
norm: calibre cpa group
Domain: nea.org

Name: Calibre CPA Group, PLLC
norm: calibre cpa group
Domain: nea.org
Industry: Professional Servicesllm

Discovered: Mar 11, 2019
Breach occurred: Mar 11, 2019 – May 7, 2019
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 3state-resident count only
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Provided relevant regulatory notices
Initial access: valid_credentials

During the incident: Launched an investigation to determine the full nature and scope of the email activity
Engaged computer forensics experts
Undertook a comprehensive review of the impacted email accounts and impacted server
Undertook a lengthy internal review of our systems
Notified law enforcement
Provided relevant regulatory notices
Secured the services of Kroll to provide identity monitoring services
Changes made: Confirmed and further strengthened the security of our systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(170 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/f.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 28, 2019
Raw hash: 2484c661709c6eef81ba7c0598825338a92a970ce31cded8f8c89b92956ffe72

Reporting entityCalibre CPA Group, PLLC

Victim entityCalibre CPA Group, PLLC

Incidentdiscovered Mar 11, 2019

Stated responseLaunched an investigation to determine the full nature and scope of the email activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov