HackingIdentity (basic)Government IDFinancial accountMediumContained

KRT CPAs, P.C.

bd_867b26d3c7796077 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 10, 2016

Filed

Jul 16, 2016

To disclose

14 weeks

Affected

182state residents only

Linked

2 filings

Confidence

66%

Full breach record for KRT CPAs, P.C. →

KRT CPAs, P.C. notified individuals that its computer system was compromised on April 10, 2016, by an outside attacker gaining access to tax software. The attacker accessed personal information including names, addresses, SSNs, and potentially bank account numbers. KRT reset passwords, implemented VPN and authentication procedures, retained forensic specialists, and reported to the IRS Criminal Investigation Division. Affected individuals were offered one year of Equifax Credit Watch Gold identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 14 weeks / 97 days

Apr 10, 2016

Discovered

Jul 16, 2016

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_449318c206237d4b2016-07-13 · +3dVerified

Name: KRT CPAs, P.C.
norm: krt cpas
Domain: kreepa.com

Name: KRT CPAs, P.C.
norm: krt cpas
Domain: kreepa.com

Discovered: Apr 10, 2016
Materiality determined: —
Notification sent: —
Affected individuals: 182state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: reported the incident to law enforcement and the IRS Criminal Investigation Division
Initial access: exploit_public_facing

During the incident: Changing all passwords used to log in to our computers
Creating a virtual private network (VPN) as an additional layer of security for remote connections to our system
Implementing additional technology and procedures to authenticate users when they log in to our system
Retained legal counsel and computer forensics specialists to help us investigate and respond to this incident
Reported the incident to law enforcement and the IRS Criminal Investigation Division and are cooperating with them to investigate it further
Changes made: Partnered with Equifax to provide its Credit Watch Gold identity theft protection product for one year at no charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(97 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJul 13 · first

South Carolina State AG+3d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2016/KRTCPA's%2CP.C..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 16, 2016
Raw hash: c269099ed3f29fbf66f69ecb5fc31f6da3d1b50769e64766cc29da62cb0c5073

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityKRT CPAs, P.C.

Victim entityKRT CPAs, P.C.

Incidentdiscovered Apr 10, 2016

Stated responseChanging all passwords used to log in to our computers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov