Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Nardella & Taylor, LLP

bd_913a2f174f2453a3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 1, 2018

Filed

Sep 7, 2018

To disclose

5 weeks

Affected

12state residents only

Linked

2 filings

Confidence

66%

Full breach record for Nardella & Taylor, LLP →

Nardella & Taylor, LLP notified clients of a phishing attack that compromised an employee's email account on August 1, 2018. Unauthorized access exposed names, SSNs, and financial account info. The firm engaged forensic experts, reset credentials, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 37 days

Aug 1, 2018

Discovered

Sep 7, 2018

Filed

vs. sector median

13 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_51afccfde904944c2018-09-07Verified

Name: Nardella & Taylor, LLP
norm: nardella taylor

Name: Nardella & Taylor, LLP
norm: nardella taylor
Industry: Professional Servicesllm

Discovered: Aug 1, 2018
Materiality determined: —
Notification sent: Aug 30, 2018
Affected individuals: 12state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Engaged computer forensic experts
Arranged for credit monitoring service (myTrueIdentity) for 12 months
Resetting employee’s access credentials
Changes made: Reviewing and revising policies
Resetting employee’s access credentials to ensure systems are secure
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(37 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGSep 7 · first

Montana State AGSep 7 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Nardella-Taylor.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 7, 2018
Raw hash: d5a6c56bb7f1f24706d77f257ef151bf57aae75dae3a70ce67d3dd4b508a03e4

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityNardella & Taylor, LLP

Victim entityNardella & Taylor, LLP

Incidentdiscovered Aug 1, 2018

Stated responseEngaged computer forensic experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov