HackingProfessional ServicesProfessional ServicesStolen CredentialsBECRansom DemandedData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPIIMediumActive

Jim Geddings, CPA LLC

bd_b2abcf0c05e572e4 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 17, 2020

Filed

Apr 10, 2020

To disclose

24 days

Affected

5state residents only

Confidence

66%

Full breach record for Jim Geddings, CPA LLC →

Jim Geddings, CPA PLLC notified clients on March 17, 2020, that an unauthorized party e-filed tax returns using stolen credentials. The incident may have exposed names, SSNs, and financial account data. The firm engaged forensic investigators, reported to the FBI IC3, and provided one year of Kroll identity monitoring services. Investigation was ongoing at the time of notice.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 24 days

Mar 17, 2020

Discovered

Apr 10, 2020

Filed

vs. sector median

15 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident

Name: Jim Geddings, CPA LLC
norm: jim geddings cpa

Name: Jim Geddings, CPA LLC
norm: jim geddings cpa
Industry: Professional Servicesllm

Discovered: Mar 17, 2020
Materiality determined: —
Notification sent: —
Affected individuals: 5state-resident count only
Data types: Identity (basic)Government IDFinancial accountPII
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Filed a report with the FBI’s online Internet Crime Complaint Center (IC3)Made aware the IRS and Idaho State Tax Commission (ISTC) of the fraudulent filings
Initial access: valid_credentials

During the incident: Engaged a third-party to conduct a forensic investigation
Made internal software system management changes
Confirmed network firewalls, computers and security protections are properly functioning
Filed a report with the FBI’s online Internet Crime Complaint Center (IC3)
Made aware the IRS and Idaho State Tax Commission (ISTC) of the fraudulent filings
Changes made: Secured the services of Kroll Inc. to provide identity monitoring services to you at no cost for one year
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 days(24 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/General-Notice-65.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 10, 2020
Raw hash: fc791be942af455161e93c883f5ca664a31b6f589150f05c47b4549c51e5ec2c

Reporting entityJim Geddings, CPA LLC

Victim entityJim Geddings, CPA LLC

Incidentdiscovered Mar 17, 2020

Stated responseEngaged a third-party to conduct a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov