HackingFinancial ServicesProfessional ServicesFinanceCustomer Data InvolvedData ExfiltratedPIIIdentity (basic)Government IDFinancialMediumResolved

L.A. Tax Service, LLP

bd_8d8eafbb2983339e · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 30, 2020

To disclose

—

Affected

Linked

4 filings

Confidence

72%

Full breach record for L.A. Tax Service, LLP →

L.A. Tax Service, LLP notified clients of a data security incident in which tax returns were potentially exposed to an unauthorized third party during June and September 2020. The firm was alerted by Lacerte Intuit on September 15, 2020, and forensic investigation concluded October 7, 2020. Approximately 50 tax returns were fraudulently filed. Exposed data includes names, addresses, taxpayer information, and SSNs. IDX identity protection services offered for 24 months.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 10, 2020

Begins

Oct 30, 2020

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_0944730271e22f652020-10-30Verified
New Hampshire State AGbd_e4447cae86149aff2020-10-30Verified
Indiana State AGbd_85c699506a2e623a2020-11-13 · +14dVerified

Name: L.A. Tax Service, LLP
norm: la tax service

Name: L.A. Tax Service, LLP
norm: la tax service
Industry: Financial ServicesllmProfessional Servicesllm

Discovered: —
Breach occurred: Jun 10, 2020 – Sep 9, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 50nationwide
Data types: PIIIdentity (basic)Government IDFinancial
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation to determine the nature and scope of the incident
Immediately changed all computer passwords
Improved computer security settings by enabling two-factor authentication for emails
Installed the Webroot anti-virus on all workstations for centralized management
Removed users from being local admin of computers, creating an AD user that has local admin to avoid login to computers and cache credentials during software installations
Offering 24 months of credit and CyberScan monitoring through IDX
Offering a $1,000,000 insurance reimbursement policy through IDX
Offering fully managed id theft recovery services through IDX
Changes made: Upgrading email license to include spam filtering
Updated firewall and anti-virus
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGOct 30 · first

New Hampshire State AGOct 30 · first

California State AGOct 30 · first · this page

Indiana State AG+14d

Pattern: first filing Oct 30 (MA), last Nov 13 (IN) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-195726
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 30, 2020
Raw hash: 77192dffeace1e845209947134080b0b595da796e862267aa060c8e6620ff2d7

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityL.A. Tax Service, LLP

Victim entityL.A. Tax Service, LLP

IncidentUnauthorized Access

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation to determine the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov