Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Benjamin Associates LLC
bd_84f641dfaf3833c7 · schema v1 · pii pii-v1
Full breach record for Benjamin Associates LLC →Benjamin & Associates, PC notified clients of a fraudulent tax filing incident involving 2022 tax returns. The attacker used stolen name, SSN, and financial account information to redirect funds. The firm reported the incident to the IRS, state authorities, and law enforcement, reset credentials, and conducted a forensic investigation confirming no unauthorized access to their own systems.
Maryland clock⏱ MD AG >30d11 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376358.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 14, 2025
- Raw hash
- d80428077f256ca09536e899e8c82df3c00a97c88d2f81d8c362d096f172721c
Reporting entity
- Name
- Benjamin Associates LLCnorm: benjamin associates
Victim entity
- Name
- Benjamin Associates LLCnorm: benjamin associates
Incident
- Discovered
- Dec 1, 2024
- Materiality determined
- —
- Notification sent
- Feb 14, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Reported matter to the IRSNotified state tax authoritiesNotified local and federal law enforcement
- Initial access
- phishing_link
Compliance
- Time to disclose
- 11 weeks(75 days from discovery to filing)
- Compliance flags
- MD AG >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.