HackingCustomer Data InvolvedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTEMPLOYMENTMediumContained
<strong>Hilderbrand & Clark, CPA's</strong>
bd_d823c307d71b2f0d · schema v1 · pii pii-v1
Full breach record for <strong>Hilderbrand & Clark, CPA's</strong> →Hilderbrand & Clark, CPA experienced unauthorized access to its systems from a foreign IP address on June 14, 2017, discovered on July 10, 2017. The incident potentially exposed sensitive tax return information for clients and employees, including Social Security numbers, financial account details, and employment data. The firm notified the FBI, IRS, and credit bureaus, and offered one year of identity theft protection services.
California clockDiscovered Jul 10, 2017 → Notified Jul 25, 201715d ✓ CA 60-day OK17 days discovery → filing
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-100608
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 27, 2017
- Raw hash
- 66d0183e428427bd4f0b6113aadd4c9f99321c5964cc1f8005e7fdeaeac1a480
Reporting entity
- Name
- <strong>Hilderbrand & Clark, CPA's</strong>norm: strong hilderbrand clark cpa s strong
- Domain
- hilderbrandcpa.com
Victim entity
- Name
- <strong>Hilderbrand & Clark, CPA's</strong>norm: strong hilderbrand clark cpa s strong
- Domain
- hilderbrandcpa.com
Incident
- Discovered
- Jul 10, 2017
- Materiality determined
- —
- Notification sent
- Jul 25, 2017
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the IRSNotified the FBINotified all applicable state agencies
Compliance
- Time to disclose
- 17 days(17 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 15d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Jul 10, 2017→ Notified: Jul 25, 201715d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.