HackingProfessional ServicesProfessional ServicesStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedData ExfiltratedIdentity (basic)Government IDFinancial accountMediumContained

H.N.R. Clark, Inc.

bd_b694c9f15a01d094 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 13, 2020

Filed

Dec 10, 2020

To disclose

8 weeks

Affected

Linked

4 filings

Confidence

66%

Full breach record for H.N.R. Clark, Inc. →

H.N.R. Clark, Inc., a tax preparation firm, experienced a data breach involving unauthorized access to an email account via a third-party tax software provider (Lacerte Intuit). The incident, discovered on October 13, 2020, affected approximately 52 clients whose tax returns were fraudulently filed. Exposed data included names, addresses, taxpayer information, and Social Security numbers. The company engaged forensic investigators, reset credentials, implemented MFA, and offered identity protection services.

J jump to incidentP pin to compareR raw source

California clockDiscovered Oct 13, 2020 → Notified Dec 10, 202058d ✓ CA 60-day OK8 weeks discovery → filing

Incident timeline

undetected · 42 days

discovery → filing · 8 weeks / 58 days

Sep 1, 2020

Begins

Oct 13, 2020

Discovered

Dec 10, 2020

Filed

vs. sector median

10 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_b7544e174a5c622f2020-12-10Verified
Indiana State AGbd_c8877ea4143fff152020-12-10Verified
Montana State AGbd_df65505eacdea2052020-12-10Verified

Name: H.N.R. Clark, Inc.
norm: hnr clark
Domain: hnrclark.com

Name: H.N.R. Clark, Inc.
norm: hnr clark
Domain: hnrclark.com
Industry: Professional Servicesllm

Discovered: Oct 13, 2020
Breach occurred: Sep 1, 2020 – Oct 31, 2020
Undetected for: 42 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 10, 2020
Affected individuals: 52nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Third party: via Lacerte Intuit
Initial access: supply_chain

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation
Changed all computer passwords
Enabled multi-factor authentication for Lacerte tax preparation system
Deployed a new email system with higher levels of spam filtering and threat protection
Upgraded network security with a new firewall
Wiped all computers and reinstalled operating systems and applications
Installed latest version of virus protection on all computers
Offering identity theft protection services through IDX
Changes made: Transmit confidential information via encrypted email
Deployed a new email system (HNRClark.com) which provides higher levels of spam filtering and threat protection
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: CA 60-day OK · 58d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Oct 13, 2020
→ Notified: Dec 10, 2020
58d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Oct 13, 2020 → Notified: Dec 10, 2020	58d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGDec 10 · first

Indiana State AGDec 10 · first

Montana State AGDec 10 · first

California State AGDec 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-197018
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 10, 2020
Raw hash: 8292afbf1219be391878f5178c7c8fefb75636bf2f4871549eef71830da78ed5

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityH.N.R. Clark, Inc.

Victim entityH.N.R. Clark, Inc.

Incidentdiscovered Oct 13, 2020

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov