HackingProfessional ServicesProfessional ServicesStolen CredentialsSupply Chain (3P Vendor)Data ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Barbara A. Medina CPA, P.C.

bd_a0deb0c9d57b8cb7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 1, 2024

Filed

Dec 18, 2024

To disclose

24 weeks

Affected

4state residents only

Confidence

65%

Full breach record for Barbara A. Medina CPA, P.C. →

Barbara A. Medina CPA, P.C. notified Montana residents of a data breach involving unauthorized access to a third-party cloud storage system. The incident, occurring May 7–June 5, 2024, exposed names, addresses, SSNs, and bank account numbers. The firm engaged forensic investigators, enrolled in IRS secure filing, and offered 12 months of Experian IdentityWorks.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 55 days

discovery → filing · 24 weeks / 170 days

May 7, 2024

Begins

Jul 1, 2024

Discovered

Dec 18, 2024

Filed

vs. sector median

+7 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident

Name: Barbara A. Medina CPA, P.C.
norm: barbara a medina cpa

Name: Barbara A. Medina CPA, P.C.
norm: barbara a medina cpa
Industry: Professional Servicesllm

Discovered: Jul 1, 2024
Breach occurred: May 7, 2024 – Jun 5, 2024
Undetected for: 55 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 25, 2024
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1195 Supply Chain Compromise
Threat actor: ExternalFinancial
Regulator citations: working with the IRS
Initial access: valid_credentials

During the incident: Working with attorneys, clients, and the IRS to rectify any fraudulently filed tax returns
Enrolled in the IRS’s secure filing program
Retained the services of a reputable computer forensics company
Changing passwords
Ensuring multi-factor authentication is enabled
Removing any malicious software from our systems
Providing our clients with a complimentary 12-month membership of Experian’s® IdentityWorksSM
Changes made: Enrolled in the IRS’s secure filing program
Ensuring multi-factor authentication is enabled
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 weeks(170 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/03/Consumer-notification-letter-131.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 18, 2024
Raw hash: 9228da217541990c24408a603db4d42325e43836fbfdcf256614380cbf2d5f9a

Reporting entityBarbara A. Medina CPA, P.C.

Victim entityBarbara A. Medina CPA, P.C.

Incidentdiscovered Jul 1, 2024

Stated responseWorking with attorneys, clients, and the IRS to rectify any fraudulently filed tax returns

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov