HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedGovernment IDPIIMediumContained

MBE CPAs

bd_cda94f21ce7d38d5 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 18, 2024

Filed

May 13, 2025

To disclose

13 months

Affected

20state residents only

Linked

7 filings

Confidence

66%

Full breach record for MBE CPAs →2 incidents on file

MBE CPA’s, LLC reported a data security incident detected on April 18, 2024, involving unauthorized access to personal information including Social Security numbers. The company engaged a third-party cybersecurity firm for forensic investigation, disconnected network access, and changed administrative credentials. Notices were sent to affected individuals on May 12, 2025, offering 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 months / 390 days

Apr 18, 2024

Discovered

May 13, 2025

Filed

vs. sector median

+37 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Nebraska State AGbd_2ba5a68ad1b6896c2025-05-13Verified
Massachusetts State AGbd_6f7b298888802b3b2025-05-13Verified
New Hampshire State AGbd_a22a32d5848a8d412025-05-19 · +6dVerified
Nebraska State AGbd_2b4e0c5dd8dc981d2025-05-28 · +15dVerified

Show 2 more filings ↓up to 27d gap

New Hampshire State AGbd_0854a7d7c693b5192025-06-06 · +24dVerified
Maine State AGbd_d5c9e4424e2ef5592025-06-09 · +27dVerified

Name: MBE CPAs
norm: mbe cpas

Name: MBE CPAs
norm: mbe cpas
Industry: Professional Servicesllm

Discovered: Apr 18, 2024
Materiality determined: —
Notification sent: May 12, 2025
Affected individuals: 20state-resident count only
Data types: Government IDPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Initial access: valid_credentials

During the incident: Disconnected all access to its network
Engaged a specialized third-party cybersecurity firm to assist with securing the environment
Conducted a comprehensive forensic investigation
Changed administrative credentials
Restored operations in a safe and secure mode
Enhanced the security measures
Changes made: Enhanced the security measures
Took steps and will continue to take steps to mitigate the risk of future harm
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(390 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 5 states

View merged incident ↗

Nebraska State AGMay 13 · first

Massachusetts State AGMay 13 · first

Montana State AGMay 13 · first · this page

New Hampshire State AG+6d

Nebraska State AG+15d

New Hampshire State AG+24d

Maine State AG+27d

Pattern: first filing May 13 (NE), last Jun 9 (ME) — a 27-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/08/Consumer-notification-letter-46.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 13, 2025
Raw hash: 52dd5cb3bc0b38db69d12d91f37c4b122855ddc5a6b2ba677e3eb2fbc4931475

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMBE CPAs

Victim entityMBE CPAs

Incidentdiscovered Apr 18, 2024

Stated responseDisconnected all access to its network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov