HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Wubbels and Duffy, CPAs, RLLP
bd_a82332c02846595f · schema v1 · pii pii-v1
Full breach record for Wubbels and Duffy, CPAs, RLLP →Wubbels & Duffy, CPA, RLLP experienced unauthorized access to its document management platform, GoFileRoom, on March 25, 2023. The firm discovered the incident on April 13, 2023, and confirmed on June 1, 2023, that personal information including names and potentially Social Security numbers was acquired. The firm engaged cybersecurity experts, secured the platform, notified the IRS, and offered credit monitoring to affected clients.
California clockDiscovered Apr 13, 2023 → Notified Apr 22, 20239d ✓ CA 60-day OK11 weeks discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-568571
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 27, 2023
- Raw hash
- cd9d1ecccc13f3d173bce961f439a85211cee9d4235e62b1c7d5c699b002ea41
Reporting entity
- Name
- Wubbels and Duffy, CPAs, RLLPnorm: wubbels and duffy cpas rllp
- Domain
- askmycpa.com
Victim entity
- Name
- Wubbels and Duffy, CPAs, RLLPnorm: wubbels and duffy cpas rllp
- Domain
- askmycpa.com
Incident
- Discovered
- Apr 13, 2023
- Materiality determined
- —
- Notification sent
- Apr 22, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Reported the incident to the Internal Revenue Service (IRS)
Compliance
- Time to disclose
- 11 weeks(75 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 9d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Apr 13, 2023→ Notified: Apr 22, 20239d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.