HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDPIIMediumContained

Bregante + Company, LLP

bd_a968dfc0d5aac65a · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 17, 2020

Filed

Aug 4, 2020

To disclose

18 days

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Bregante + Company, LLP →2 incidents on file

Bregante + Company LLP notified clients of a data security incident discovered in July 2020 during tax return preparation. An unauthorized user may have accessed client personal information including names, SSNs, and tax data. The firm engaged forensic investigators, notified the FBI and IRS, and offered credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 18 days

Jul 17, 2020

Discovered

Aug 4, 2020

Filed

vs. sector median

15 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_4bb96677aa39da982020-08-04Verified

Name: Bregante + Company, LLP
norm: bregante

Name: Bregante + Company, LLP
norm: bregante
Industry: Professional Servicesllm

Discovered: Jul 17, 2020
Materiality determined: —
Notification sent: Jul 17, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDPII
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the Federal Bureau of InvestigationNotified the Internal Revenue Service Criminal Investigation Division
Initial access: valid_credentials

During the incident: Launched an investigation
Worked with the IRS and our software provider
Retained an independent digital cybersecurity firm to conduct a forensic investigation
Notified the Federal Bureau of Investigation and the Internal Revenue Service Criminal Investigation Division
Offering identity theft protection services through ID Experts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 18 days(18 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGAug 4 · first

Montana State AGAug 4 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Bregante-Company-Consumer-ltr.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 4, 2020
Raw hash: c7b54c8dd243719f9baf22ec273250d7de0a3f643b696ab9932258422f7290ca

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityBregante + Company, LLP

Victim entityBregante + Company, LLP

Incidentdiscovered Jul 17, 2020

Stated responseLaunched an investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov