HackingStolen CredentialsMulti-Stage ChainCustomer Data InvolvedData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASICMediumContained
John N. Fernez CPA, LLC
bd_ab31eca5ad1db4ce · schema v1 · pii pii-v1
Full breach record for John N. Fernez CPA, LLC →John N. Fernez CPA, LLC reported a security breach where an unauthorized individual compromised its Intuit cloud-based tax software credentials. The actor filed fraudulent tax returns for 34 clients, exposing PII including SSNs, financial data, and health insurance info. Fernez LLC notified the IRS, changed passwords, and offered 24 months of credit monitoring. The incident was discovered on April 16, 2025, and notifications were mailed on June 13, 2025.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed34 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/john-n-fernez-cpa-20250613.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 13, 2025
- Raw hash
- 96814e01d2186f51b44f885b15bf860400516ded2fa4654f14405bf82a2448c1
Reporting entity
- Name
- John N. Fernez CPA, LLCnorm: john n fernez cpa
Victim entity
- Name
- John N. Fernez CPA, LLCnorm: john n fernez cpa
Incident
- Discovered
- Apr 16, 2025
- Materiality determined
- —
- Notification sent
- Jun 13, 2025
- Affected individuals
- 34
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTFINANCIAL_CREDENTIALSHEALTH_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Internal Revenue Service (IRS)
- Third party
- via Intuit
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.