HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Fox & Company CPAs, Inc.

bd_a8f75c1e0bdd2e5a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Aug 28, 2023

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

64%

Full breach record for Fox & Company CPAs, Inc. →2 incidents on file

Fox & Company CPAs, Inc. notified consumers that an unauthorized third party gained access to files containing personal information via Citrix ShareFile on July 13, 2023. The affected data included names and potentially Social Security numbers, bank account numbers, or credit card numbers. The firm offered one year of Equifax credit monitoring and enrolled victims in the IRS Taxpayer Protection Program. The FBI was notified.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 13, 2023

Begins

Aug 28, 2023

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_8ff9c39f7fe809172023-08-28Verified

Name: Fox & Company CPAs, Inc.
norm: fox company cpas

Name: Fox & Company CPAs, Inc.
norm: fox company cpas
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Jul 13, 2023
Materiality determined: —
Notification sent: Aug 28, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: In regular direct communication with the Internal Revenue Service (IRS)Notified the FBI
Initial access: external_remote_services

During the incident: Offering a complimentary one-year membership of Equifax Complete Premier
Enrolled affected individuals in the IRS Taxpayer Protection Program
Notified the FBI
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGAug 28 · first

Vermont State AGAug 28 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-08-28-fox-and-company-cpas-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 28, 2023
Raw hash: 699df881e5f3470c07d408a17efae6969793c27e503c128534635b5fcfec2356

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFox & Company CPAs, Inc.

Victim entityFox & Company CPAs, Inc.

IncidentUnauthorized Access

Stated responseOffering a complimentary one-year membership of Equifax Complete Premier

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov