HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMediumContained

Accounting & Tax Associates, Inc.

bd_d4d8d63f316fcb2e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 11, 2025

Filed

Jul 21, 2025

To disclose

6 weeks

Affected

24state residents only

Linked

6 filings

Confidence

66%

Full breach record for Accounting & Tax Associates, Inc. →

Accounting & Tax Associates, Inc. notified the New Hampshire Attorney General that an unauthorized party accessed its Intuit LaCerte Tax account on or around May 14, 2025. The breach exposed personal information, including names and Social Security numbers, of approximately 24 New Hampshire residents. The company discovered the incident on June 11, 2025, engaged forensic investigators, contacted law enforcement, and began notifying affected individuals on July 18, 2025, offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 28 days

discovery → filing · 6 weeks / 40 days

May 14, 2025

Begins

Jun 11, 2025

Discovered

Jul 21, 2025

Filed

vs. sector median

12 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Massachusetts State AGbd_3ece593e0c21911f2025-07-18 · +3dVerified
Nebraska State AGbd_c836b651f9aac2f52025-07-18 · +3dVerified
Indiana State AGbd_d1e2d13404d5545f2025-07-18 · +3dVerified
Maine State AGbd_f9f3694149facaf32025-07-18 · +3dCandidate

Show 1 more filing ↓up to 59d gap

Massachusetts State AGbd_99bec506284c40072025-05-23 · +59dCandidate

Name: Accounting & Tax Associates, Inc.
norm: accounting tax associates

Name: Accounting & Tax Associates, Inc.
norm: accounting tax associates
Industry: Professional Servicesllm

Discovered: Jun 11, 2025
Breach occurred: May 14, 2025
Undetected for: 28 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 18, 2025
Affected individuals: 24state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notified Attorney General John Formella
Initial access: valid_credentials

During the incident: Secured the environment
Contacted law enforcement
Followed IRS RICS department guidelines
Commenced a prompt and thorough investigation
Worked closely with external cybersecurity professionals
Conducted extensive forensic investigation and manual document review
Provided notification to affected residents
Offered complimentary credit monitoring services
Changes made: Continually evaluates and modifies its practices to enhance the security and privacy of the personal information it maintains
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(40 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 5 states

View merged incident ↗

Massachusetts State AGMay 23 · first

Massachusetts State AG+56d

Nebraska State AG+56d

Indiana State AG+56d

Maine State AG+56d

New Hampshire State AG+59d · this page

Pattern: first filing May 23 (MA), last Jul 21 (NH) — a 59-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/accounting-tax-associates-20250721.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 21, 2025
Raw hash: f94f3f9186185c53bd45bd482a783177f0b58efcd00c87308ec14dc589638c3b

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityAccounting & Tax Associates, Inc.

Victim entityAccounting & Tax Associates, Inc.

Incidentdiscovered Jun 11, 2025

Stated responseSecured the environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov