HackingCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Kenneth Wong, CPA, Inc
bd_a6ae8a369609b51b · schema v1 · pii pii-v1
Full breach record for Kenneth Wong, CPA, Inc →Kenneth Wong, CPA, Inc. detected suspicious activity on February 4, 2025, discovering that an unauthorized party accessed systems between February 3 and February 5, 2025. The incident involved client tax information, including names, Social Security numbers, and financial account data. The firm secured its systems, conducted an investigation, implemented additional security measures, and offered credit monitoring to affected individuals.
California clockDiscovered Feb 4, 2025 → Notified May 23, 2025108d ✗ CA 60-day late15 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-603155
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 23, 2025
- Raw hash
- 496c97acb506e756a8faec04fcf1a0c83ee4a044c9c05fa71ba80dd3ef63399d
Reporting entity
- Name
- Kenneth Wong, CPA, Incnorm: kenneth wong cpa
Victim entity
- Name
- Kenneth Wong, CPA, Incnorm: kenneth wong cpa
Incident
- Discovered
- Feb 4, 2025
- Materiality determined
- —
- Notification sent
- May 23, 2025
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 15 weeks(108 days from discovery to filing)
- Compliance flags
- CA 60-day late · 108d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Feb 4, 2025→ Notified: May 23, 2025108d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.