HackingFinancial ServicesProfessional ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIPCIPHICREDENTIALSFINANCIALIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICAUTHENTICATIONMediumContained
Kerkering, Barberio & Co., Certified Public Accountants
bd_87bdbb2448186060 · schema v1 · pii pii-v1
Full breach record for Kerkering, Barberio & Co., Certified Public Accountants →Kerkering, Barberio & Co. (CPA firm, Sarasota FL) discovered May 27, 2025 that an unauthorized actor accessed four employee email accounts around May 25, 2025. Forensic investigation confirmed file exfiltration. Data exposed includes SSNs, financial accounts, credentials, health info, and identity documents. 3 Maine residents affected (4,179 total). Notifications mailed March 13, 2026. Cyberscout credit monitoring offered.
Maine clockDiscovered May 27, 2025 → Filed with AG Mar 13, 2026290d ✗ ME AG >90d41 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_fb5c88001a862006New Hampshire State AGfiled 2026-03-12(1d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c5e0fa5c-23cb-420c-b406-9250eb91053a.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 13, 2026
- Raw hash
- 262065fabd6940303df04b758ccb98acd5cd0112250299870c6faaf5aa53b45a
Reporting entity
- Name
- Kerkering, Barberio & Co., Certified Public Accountantsnorm: kerkering barberio co certified public accountants
- Industry
- Financial Services
Victim entity
- Name
- Kerkering, Barberio & Co., Certified Public Accountantsnorm: kerkering barberio co certified public accountants
- Industry
- Financial Services
- Industry
- Financial ServicesllmProfessional Servicesllm
Incident
- Discovered
- May 27, 2025
- Materiality determined
- —
- Notification sent
- Mar 13, 2026
- Affected individuals
- 3
- Data types
- PIIPCIPHICREDENTIALSFINANCIALIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICAUTHENTICATION
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Maine Attorney General notified March 13, 2026
Compliance
- Time to disclose
- 41 weeks(290 days from discovery to filing)
- Compliance flags
- ME AG >90d · 290dME resident >180d · 290d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: May 27, 2025→ Filed with AG: Mar 13, 2026290d 90 days ME AG >90d Maine Discovered: May 27, 2025→ Notified: Mar 13, 2026290d 180 days ME resident >180d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.