HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Veyna & Forschino
bd_7967bd8bcb780a45 · schema v1 · pii pii-v1
Full breach record for Veyna & Forschino →Veyna & Forschino, a tax preparation firm, disclosed a data breach involving unauthorized access to a company workstation via a remote desktop application between November 6 and 24, 2017. The incident exposed client PII, including SSNs, names, addresses, and financial account details. The firm engaged forensic investigators, notified law enforcement (FBI, IRS, FTB), and offered credit monitoring services to affected individuals.
California clockDiscovered Nov 27, 2017 → Notified Dec 22, 201725d ✓ CA 60-day OK24 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-131389
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 21, 2017
- Raw hash
- ca64991650bff30e3ace7f815c1a826c85fe02f36a8ca4e2de24a9728424d7f6
Reporting entity
- Name
- Veyna & Forschinonorm: veyna forschino
Victim entity
- Name
- Veyna & Forschinonorm: veyna forschino
Incident
- Discovered
- Nov 27, 2017
- Materiality determined
- —
- Notification sent
- Dec 22, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified the FBI, the IRS, and the FTBNotified all applicable state agencies
- Initial access
- external_remote_services
Compliance
- Time to disclose
- 24 days(24 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 25d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 27, 2017→ Notified: Dec 22, 201725d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.