HackingProfessional ServicesProfessional ServicesDelayed DiscoveryCustomer Data InvolvedDOJ-Delayed FilingIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumContained
Hayden, Narey & Persich
bd_8243436990150150 · schema v1 · pii pii-v1
Full breach record for Hayden, Narey & Persich →Hayden, Narey & Persich, a tax preparation firm in San Clemente, CA, experienced unauthorized access to its systems via a Remote Desktop application on July 3–4, 2017. A malicious actor accessed client tax records potentially including names, SSNs, W-2/1099 data, and bank account details. A law enforcement hold delayed notification until November 28, 2017. A forensic IT firm was engaged; affected individuals were offered Equifax credit monitoring.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-119500
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 5, 2017
- Raw hash
- 061d54d0a5c02eb29665a08b642f764b066a0d7dcfb6a65bdfb5a8d7166c5779
Reporting entity
- Name
- Hayden, Narey & Persichnorm: hayden narey persich
- Domain
- hnpcpa.com
Victim entity
- Name
- Hayden, Narey & Persichnorm: hayden narey persich
- Domain
- hnpcpa.com
- Industry
- Professional Servicesllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- Dec 1, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1133 External Remote ServicesT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the FBINotified the IRSNotified the Orange County Sheriff's DepartmentNotified all three credit bureausNotifying applicable state agencies
- Initial access
- external_remote_services
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.