HackingProfessional ServicesProfessional ServicesSupply Chain (3P Vendor)Customer Data InvolvedPIIGovernment IDFinancialMediumContained

Arsement Redd Gardner Benoit LLC

bd_7600f33de7502d08 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 22, 2024

Filed

Jun 18, 2024

To disclose

8 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for Arsement Redd Gardner Benoit LLC →

Arsement Redd Gardner Benoit LLC (ARGB) notified the NH AG of a data event involving its third-party tax software, Intuit's Lacerte Tax. Unauthorized access occurred between March 14 and April 22, 2024. ARGB discovered suspicious activity on April 22, 2024. One NH resident was affected. ARGB engaged cybersecurity specialists, notified law enforcement, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 39 days

discovery → filing · 8 weeks / 57 days

Mar 14, 2024

Begins

Apr 22, 2024

Discovered

Jun 18, 2024

Filed

vs. sector median

10 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_c19b9fca34aff5722024-06-18Verified
Montana State AGbd_faac02e995d2cc712024-06-18Candidate

Name: Arsement Redd Gardner Benoit LLC
norm: arsement redd gardner benoit

Name: Arsement Redd Gardner Benoit LLC
norm: arsement redd gardner benoit
Industry: Professional Servicesllm

Discovered: Apr 22, 2024
Breach occurred: Mar 14, 2024 – Apr 22, 2024
Undetected for: 39 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 18, 2024
Affected individuals: 1state-resident count only
Data types: PIIGovernment IDFinancial
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcementNotified federal and state tax authorities
Initial access: supply_chain

During the incident: Began working with third-party cybersecurity specialists to understand the nature and scope of the activity
Notified federal law enforcement as well as federal and state tax authorities of the event
Providing access to complimentary credit monitoring services for , through Experian, to individuals whose information was potentially affected by this incident
Changes made: Working to implement additional safeguards and training to its employees
Review existing policies and procedures, evaluating our current relationship with Intuit’s Lacerte Tax Product, and implementing additional protocols to ensure the security of information stored with our third-party vendors
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJun 18 · first

Montana State AGJun 18 · first

New Hampshire State AGJun 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/arsement-redd-gardner-benoit-20240618.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 18, 2024
Raw hash: 1c1d2f6b4b21c179e0a295b41a4a8c821e3ed525225e948fd6e148d5fe620c28

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityArsement Redd Gardner Benoit LLC

Victim entityArsement Redd Gardner Benoit LLC

Incidentdiscovered Apr 22, 2024

Stated responseBegan working with third-party cybersecurity specialists to understand the nature and scope of the activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov