HackingProfessional ServicesProfessional ServicesDelayed DiscoveryCustomer Data InvolvedDOJ-Delayed FilingIdentity (basic)Government IDFinancial accountEmploymentMediumContained

Hayden, Narey & Persich

bd_8243436990150150 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Dec 5, 2017

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

81%

Full breach record for Hayden, Narey & Persich →

Hayden, Narey & Persich, a tax preparation firm in San Clemente, CA, experienced unauthorized access to its systems via a Remote Desktop application on July 3–4, 2017. A malicious actor accessed client tax records potentially including names, SSNs, W-2/1099 data, and bank account details. A law enforcement hold delayed notification until November 28, 2017. A forensic IT firm was engaged; affected individuals were offered Equifax credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 3, 2017

Begins

Dec 5, 2017

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_4be6db2f49a16a5e2017-12-04 · +1dVerified
Massachusetts State AGbd_54d7fbe0aabc8b242017-12-04 · +1dVerified

Name: Hayden, Narey & Persich
norm: hayden narey persich
Domain: hnpcpa.com

Name: Hayden, Narey & Persich
norm: hayden narey persich
Domain: hnpcpa.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Jul 3, 2017 – Jul 4, 2017
Materiality determined: —
Notification sent: Dec 1, 2017
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1133 External Remote ServicesT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the FBINotified the IRSNotified the Orange County Sheriff's DepartmentNotified all three credit bureausNotifying applicable state agencies
Initial access: external_remote_services

During the incident: Contacted our tax filing software company, the IRS, and the Orange County Sheriff's Department
A law enforcement investigation was commenced
Hired a specialized forensic IT firm for additional investigation
Notified the FBI, the IRS, and local law enforcement
Notified all three credit bureaus
Arranged for Equifax® to provide its Credit Watch™ Gold identity theft protection product for one year at no charge
Changes made: Reviewing office policies and procedures to ensure security measures are taken to further minimize such an incident from occurring again
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

New Hampshire State AGDec 4 · first

Massachusetts State AGDec 4 · first

California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-119500
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 5, 2017
Raw hash: 061d54d0a5c02eb29665a08b642f764b066a0d7dcfb6a65bdfb5a8d7166c5779

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityHayden, Narey & Persich

Victim entityHayden, Narey & Persich

IncidentUnauthorized Access

Stated responseContacted our tax filing software company, the IRS, and the Orange County Sheriff's Department

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov