Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedTargetedPIIIdentity (basic)LowContained

Yount, Hyde & Barbour, P.C.

bd_d96efef023d4dfaa · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 13, 2020

Filed

May 27, 2020

To disclose

15 weeks

Affected

2state residents only

Linked

4 filings

Confidence

64%

Full breach record for Yount, Hyde & Barbour, P.C. →

Yount, Hyde & Barbour, P.C. notified clients of a phishing incident affecting employee email accounts. Unauthorized access occurred between Oct 15, 2019 and Jan 23, 2020. The firm engaged forensic investigators, notified the FBI, and offered credit monitoring. Personal information in impacted emails may have been accessed.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 121 days

discovery → filing · 15 weeks / 104 days

Oct 15, 2019

Begins

Feb 13, 2020

Discovered

May 27, 2020

Filed

vs. sector median

4 wks faster

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_0f7f2d013878bbd42020-05-27Verified
Massachusetts State AGbd_8bb82669244a33d82020-05-27Verified
Indiana State AGbd_e4b3bd49cbfeab992020-05-27Verified

Name: Yount, Hyde & Barbour, P.C.
norm: yount hyde barbour

Name: Yount, Hyde & Barbour, P.C.
norm: yount hyde barbour
Industry: Professional Servicesllm

Discovered: Feb 13, 2020
Breach occurred: Oct 15, 2019 – Jan 23, 2020
Undetected for: 121 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: reported this matter to the Federal Bureau of Investigation
Initial access: phishing_link

During the incident: Took steps to secure its email system
Launched an investigation with the assistance of a leading digital forensics firm
Reported this matter to the Federal Bureau of Investigation
Providing you with complimentary credit monitoring and identity protection services through Kroll
Changes made: Implemented enhanced security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(104 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGMay 27 · first

Massachusetts State AGMay 27 · first

Indiana State AGMay 27 · first

Montana State AGMay 27 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-93.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 27, 2020
Raw hash: d0529572338152cf4258e7cdebdc4668c560c7a1bd10c8f84f3482cffc04f25e

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityYount, Hyde & Barbour, P.C.

Victim entityYount, Hyde & Barbour, P.C.

Incidentdiscovered Feb 13, 2020

Stated responseTook steps to secure its email system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov