HackingFinancial ServicesProfessional ServicesFinanceData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTFINANCIALMediumContained
Harris, Burnett, Arend & Schmiesing CPA
bd_d9d87e937183103b · schema v1 · pii pii-v1
Full breach record for Harris, Burnett, Arend & Schmiesing CPA →Harris, Burnett, Arend & Schmiesing CPA (a CPA/financial services firm) reported an external system breach discovered on July 2, 2025. An unknown bad actor improperly accessed individuals' information, potentially including names, Social Security numbers, and financial data. The network was locked down and an investigation concluded. 2153 total individuals were affected, including 2 Maine residents. IDX identity protection services (12 months) were offered to affected individuals.
Maine clockDiscovered Jul 2, 2025 → Filed with AG Aug 11, 202540d ⏱ ME AG >30d6 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_f3cc1f01803d4f07Indiana State AGfiled 2025-08-07(4d gap)Verified
- bd_9ff607749d60599cNew Hampshire State AGfiled 2025-08-18(7d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8b1df7c6-4eb0-4945-a8f0-8fb03130533c.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 11, 2025
- Raw hash
- a157bd9acaf9ec973d6592d54030d00d0bfbed2722c7bb899edec81a63a1c1a7
Reporting entity
- Name
- Harris, Burnett, Arend & Schmiesing CPAnorm: harris burnett arend schmiesing cpa
- Industry
- Financial Services
Victim entity
- Name
- Harris, Burnett, Arend & Schmiesing CPAnorm: harris burnett arend schmiesing cpa
- Industry
- Financial Services
- Industry
- Financial ServicesllmProfessional Servicesllm
Incident
- Discovered
- Jul 2, 2025
- Materiality determined
- —
- Notification sent
- Aug 7, 2025
- Affected individuals
- 2
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- 6 weeks(40 days from discovery to filing)
- Compliance flags
- ME AG >30d · 40d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 2, 2025→ Filed with AG: Aug 11, 202540d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.