DisclosureLens
HackingProfessional ServicesProfessional ServicesCustomer Data InvolvedEmployee Data InvolvedGovernment IDIdentity (basic)Financial accountEmploymentMediumContained

D'Angelo & Associates

bd_bbc1bb1ad134d011 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 4, 2017

Filed

May 12, 2017

To disclose

5 weeks

Affected

Not disclosed

Confidence

64%
Full breach record for D'Angelo & Associates →

D'Angelo & Associates, APC experienced unauthorized access to its tax program systems from a foreign IP address between March 25 and April 15, 2017. The incident was discovered on April 4, 2017, when suspicious electronic activity was detected. Affected data included names, Social Security numbers, dates of birth, addresses, employment information (W-2s, 1099s), and direct deposit bank account details. The firm notified the FBI, IRS, and Franchise Tax Board, disabled remote access, engaged forensic investigators, and provided 12 months of identity repair and credit monitoring to affected individuals.

California clockDiscovered Apr 4, 2017 → Notified May 12, 201738d ✓ CA 60-day OK5 weeks discovery → filing

Incident timeline

undetected · 10 days
discovery → filing · 5 weeks / 38 days

Mar 25, 2017

Begins

Apr 4, 2017

Discovered

May 12, 2017

Filed

vs. sector median

14 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.