PhysicalProfessional ServicesProfessional ServicesTheftCustomer Data InvolvedIdentity (basic)Government IDMediumContained

Ara Haddadian CPA

bd_c5df03b7018bc4fc · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Apr 3, 2023

To disclose

—

Affected

1state residents only

Linked

4 filings

Confidence

66%

Full breach record for Ara Haddadian CPA →

Ara Haddadian CPA reported the theft of portable hard drives containing data backups from his personal vehicle on February 15, 2023. The stolen drives may have contained the name and Social Security number of approximately one New Hampshire resident. The firm reported the theft to law enforcement, conducted an internal investigation, and is offering 24 months of credit monitoring and identity restoration services through Experian to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 15, 2023

Begins

Apr 3, 2023

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_5a3a9f27fb81586d2023-03-30 · +4dVerified
California State AGbd_6e765ba4035905fe2023-03-30 · +4dCandidate
Massachusetts State AGbd_d1d9ef8f8fad4c1a2023-03-30 · +4dVerified

Name: ARA
norm: ara
Domain: ara.com

Name: Ara Haddadian CPA
norm: ara haddadian cpa
Domain: arahcpa.com
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Feb 15, 2023
Materiality determined: —
Notification sent: Mar 30, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unknown
MITRE ATT&CK: T1052 Exfiltration Over Physical Medium
Regulator citations: Provided notice to the Office of the New Hampshire Attorney GeneralProviding written notice of this event to other appropriate regulatory authorities

During the incident: Reported the theft to local law enforcement
Initiated an internal investigation to determine the scope of any potential impact
Undertook an extensive review of firm's records to determine which clients' information may have been contained on the drives
Providing access to credit monitoring and identity restoration services for twenty-four (24) months, through Experian
Changes made: Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one's credit file
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGMar 30 · first

California State AGMar 30 · first

Massachusetts State AGMar 30 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/ara-haddadian-20230403.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 3, 2023
Raw hash: 0f2d9107cea5a665e03ca998e4e3ef873af1972ea562d7ae001928f6fd1c916b

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityARA

Victim entityAra Haddadian CPA

IncidentUnknown

Stated responseReported the theft to local law enforcement

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov