Social EngineeringProfessional ServicesProfessional ServicesBECStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Rick L. Hug CPA & Associates

bd_ad25837b8530886d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 27, 2022

Filed

Mar 25, 2022

To disclose

26 days

Affected

4state residents only

Linked

2 filings

Confidence

66%

Full breach record for Rick L. Hug CPA & Associates →

Rick L. Hug CPA, P.C. notified clients that fraudulent tax returns were filed using their PTINs after the Oregon Dept of Revenue and IRS alerted them. No evidence of data removal from systems. Data potentially at risk included names, SSNs, and financial accounts. Offered 1-year credit monitoring. Implemented return verification systems with tax authorities.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 26 days

Feb 27, 2022

Discovered

Mar 25, 2022

Filed

vs. sector median

14 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Oregon State AGbd_e5f5a1a0b7b4ec1f2022-04-07 · +13dVerified by operator

Name: Rick L. Hug CPA & Associates
norm: rick l hug cpa associates

Name: Rick L. Hug CPA & Associates
norm: rick l hug cpa associates
Industry: Professional Servicesllm

Discovered: Feb 27, 2022
Materiality determined: —
Notification sent: —
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain CompromiseT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Oregon Department of Revenue alerted usInternal Revenue Service alerted uscommunication with the Oregon Department of Revenue and the Internal Revenue Service
Initial access: supply_chain

During the incident: Commenced a prompt and thorough investigation
Working very closely with external cybersecurity professionals
In communication with the Oregon Department of Revenue and the Internal Revenue Service
Extensive and thorough forensic investigation
Offering a complimentary one-year membership in Equifax Credit Watch Gold
Set up systems with the Oregon Department of Revenue and the Internal Revenue Service that allows them to verify the legitimacy of your return before we file it
Changes made: Set up systems with the Oregon Department of Revenue and the Internal Revenue Service that allows them to verify the legitimacy of your return before we file it
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 26 days(26 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGMar 25 · first · this page

Oregon State AG+13d

Pattern: first filing Mar 25 (MT), last Apr 7 (OR) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-Notification-Letter-283.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 25, 2022
Raw hash: ca2abe190000ab477dcb9761d147fde8c00de0c35f8384609f212c3abc19c7f6

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityRick L. Hug CPA & Associates

Victim entityRick L. Hug CPA & Associates

Incidentdiscovered Feb 27, 2022

Stated responseCommenced a prompt and thorough investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov