HackingStolen CredentialsCustomer Data InvolvedData ExfiltratedIDENTITY_GOVERNMENTIDENTITY_BASICMediumActive
Mercadien PC Certified Public Accountants
bd_b06b2f75cc90e445 · schema v1 · pii pii-v1
Full breach record for Mercadien PC Certified Public Accountants →Mercadien PC, a Delaware CPA firm, disclosed a cybersecurity incident involving unauthorized access to customer records. The breach exposed personally identifiable information, including Social Security numbers and names. The firm is offering 12 months of credit monitoring and advising affected individuals on IRS Identity Protection PINs. The investigation is ongoing.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_5a136d8dad7a1346Indiana State AGfiled 2026-02-17Verified
- bd_bb8b76494cae40c6South Carolina State AGfiled 2026-02-23(6d gap)Verified
- bd_7b787e3dbbd82d8eTexas State AGfiled 2026-02-24(7d gap)Verified
- bd_6a472f77725ed762New Hampshire State AGfiled 2026-01-05(43d gap)Verified
Show 1 more filing ↓Show fewer ↑up to 48d gap
- bd_be4f63906a17f728Maine State AGfiled 2025-12-31(48d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2026/03/Mercadien-MCU-Adult-12-months-Notice-Redacted.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 17, 2026
- Raw hash
- e467df1f38bff96e7d98dd25691295a41b0ef643dd76af06f738e90b0db8ed3e
Reporting entity
- Name
- Mercadien PC Certified Public Accountantsnorm: mercadien pc certified public accountants
Victim entity
- Name
- Mercadien PC Certified Public Accountantsnorm: mercadien pc certified public accountants
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unknown
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Filed notice with Delaware Attorney General
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.