HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumContained

Chiorini, Hunt & Jacobs

bd_7aeb3f4f1cd9a774 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 27, 2017

Filed

Oct 27, 2017

To disclose

4 weeks

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Chiorini, Hunt & Jacobs →

Chiorini, Hunt & Jacobs, a CPA firm, disclosed that an attacker compromised the email account of partner David Jacobs and accessed three firm email accounts between July 1 and September 27, 2017. The breach potentially exposed clients' names, SSNs, tax returns, and bank account information. The firm changed credentials, engaged forensic investigators, notified law enforcement and credit bureaus, and offered one year of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Sep 27, 2017 → Notified Oct 27, 201730d ✓ CA 60-day OK4 weeks discovery → filing

Incident timeline

undetected · 88 days

discovery → filing · 4 weeks / 30 days

Jul 1, 2017

Begins

Sep 27, 2017

Discovered

Oct 27, 2017

Filed

vs. sector median

13 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_4421f7989d7a4c152017-10-26 · +1dVerified

Name: Chiorini, Hunt & Jacobs
norm: chiorini hunt jacobs
Domain: chj.com

Name: Chiorini, Hunt & Jacobs
norm: chiorini hunt jacobs
Domain: chj.com
Industry: Professional Servicesllm

Discovered: Sep 27, 2017
Breach occurred: Jul 1, 2017 – Sep 27, 2017
Undetected for: 88 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 27, 2017
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified the Federal Bureau of InvestigationNotified applicable state agencies
Initial access: valid_credentials

During the incident: All firm email credentials were immediately changed
Hired a third-party IT firm
Notified the Federal Bureau of Investigation
Notified the three credit bureaus
Notified applicable state agencies
Providing all potentially impacted adults with one year of myTrueIdentity, an online credit monitoring service, provided by TransUnion Interactive
Changes made: Reviewing the most recent security offerings from Microsoft, our email host, to help prevent such an event from occurring again
All outgoing email from this firm that contains personal identification information will be sent via Sharefile, a secure file sharing service
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: CA 60-day OK · 30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Sep 27, 2017
→ Notified: Oct 27, 2017
30d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Sep 27, 2017 → Notified: Oct 27, 2017	30d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGOct 26 · first

California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-103063
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 27, 2017
Raw hash: 9be3d307f0eb2b1ed662ea63b72723f1cd08b00893d7686f019e344550a68257

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityChiorini, Hunt & Jacobs

Victim entityChiorini, Hunt & Jacobs

Incidentdiscovered Sep 27, 2017

Stated responseAll firm email credentials were immediately changed

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov