Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICFINANCIALLowContained
Hutchison, Hohman & Co., LLP.
bd_92e20a2727091503 · schema v1 · pii pii-v1
Full breach record for Hutchison, Hohman & Co., LLP. →Martin, Hutchison and Hohman, CPAs experienced a data breach on February 15, 2019, after a partner fell victim to a tech support scam. The attacker gained remote access to a computer containing unencrypted tax documents and client data. The firm contained the incident by disconnecting the device and replacing the hard drive. Client PII, including tax returns, was potentially compromised.
California clockDiscovered Feb 15, 2019 → Notified Feb 19, 20194d ✓ CA 60-day OK6 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-144891
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 21, 2019
- Raw hash
- d8c6e307141b9979487201a34601b2240988a223dec75e089fb4bd522a0d3db8
Reporting entity
- Name
- Hutchison, Hohman & Co., LLP.norm: hutchison hohman
- Domain
- hhco.cpa
Victim entity
- Name
- Hutchison, Hohman & Co., LLP.norm: hutchison hohman
- Domain
- hhco.cpa
Incident
- Discovered
- Feb 15, 2019
- Materiality determined
- —
- Notification sent
- Feb 19, 2019
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICFINANCIAL
- Attack vector
- Unknown
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1059 Command and Scripting Interpreter
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 4d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 15, 2019→ Notified: Feb 19, 20194d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.