Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsTargetedPIICredentialsLowContained

Kenneth M. Gerstein, CPA, MST, LLC

bd_a03eb76372e076c5 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 21, 2022

Filed

Sep 7, 2022

To disclose

33 weeks

Affected

1state residents only

Linked

4 filings

Confidence

65%

Full breach record for Kenneth M. Gerstein, CPA, MST, LLC →

Kenneth M. Gerstein, CPA, MST, LLC notified individuals of unauthorized access to an employee email account between Jan 8-22, 2022. Suspicious activity detected Jan 21, 2022. Name and credentials exposed. Account secured, investigation launched, credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 13 days

discovery → filing · 33 weeks / 229 days

Jan 8, 2022

Begins

Jan 21, 2022

Discovered

Sep 7, 2022

Filed

vs. sector median

+14 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_1c1ff75fe67b3e7a2022-09-07Candidate
Massachusetts State AGbd_a7c6d5361f976eac2022-09-07Verified
New Hampshire State AGbd_780f2993e3b30aa62022-09-12 · +5dVerified

Name: Kenneth M. Gerstein, CPA, MST, LLC
norm: kenneth m gerstein cpa mst

Name: Kenneth M. Gerstein, CPA, MST, LLC
norm: kenneth m gerstein cpa mst
Industry: Professional Servicesllm

Discovered: Jan 21, 2022
Breach occurred: Jan 8, 2022 – Jan 22, 2022
Undetected for: 13 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 7, 2022
Affected individuals: 1state-resident count only
Data types: PIICredentials
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: External
Initial access: phishing_link

During the incident: Secured the email account by changing the password
Launched an investigation
Offering complimentary credit monitoring and identity restoration services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(229 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGSep 7 · first

Massachusetts State AGSep 7 · first

Montana State AGSep 7 · first · this page

New Hampshire State AG+5d

Pattern: first filing Sep 7 (ME), last Sep 12 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-548.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 7, 2022
Raw hash: febae6e6c62fefbe2b6dc5a76019cd1378f17309bdda7120005540ce52b5c53e

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityKenneth M. Gerstein, CPA, MST, LLC

Victim entityKenneth M. Gerstein, CPA, MST, LLC

Incidentdiscovered Jan 21, 2022

Stated responseSecured the email account by changing the password

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov