HackingProfessional ServicesProfessional ServicesStolen CredentialsDelayed DiscoveryCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumActive

Hood & Associates CPAs, PC

bd_dab643b0b8b36742 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jun 11, 2019

To disclose

—

Affected

2state residents only

Linked

3 filings

Confidence

65%

Full breach record for Hood & Associates CPAs, PC →

Hood & Associates CPAs, PC notified clients of unauthorized access to its network and email accounts between March 12, 2018, and March 24, 2019. The firm engaged forensic specialists and law enforcement. Potential exposure includes names, SSNs, DOBs, driver's licenses, and financial account numbers. The firm implemented enhanced monitoring, firewalls, and dual-factor authentication, and offered one year of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Mar 12, 2018

Begins

Jun 11, 2019

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

New Hampshire State AGbd_9159794fe5e3fa392019-06-17 · +6dVerified
Massachusetts State AGbd_96162bc071b32eb82019-06-18 · +7dVerified

Name: Hood & Associates CPAs, PC
norm: hood associates cpas

Name: Hood & Associates CPAs, PC
norm: hood associates cpas
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Mar 12, 2018 – Mar 24, 2019
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: reported the incident to law enforcement
Initial access: valid_credentials

During the incident: Worked with legal counsel and leading computer forensic specialists to investigate the incident
Reported the incident to law enforcement
Made additional investments in enhanced monitoring, hardware, software, and staff training
Implemented an enhanced firewall on our network and 24/7 monitoring
Reviewing our network and email accounts to ensure that documents containing personal information are encrypted and accessible only through dual-factor authentication
Changes made: Implemented an enhanced firewall on our network and 24/7 monitoring
Reviewing our network and email accounts to ensure that documents containing personal information are encrypted and accessible only through dual-factor authentication
Offering one year of identity theft protection services through myTrueIdentity provided by TransUnion Interactive
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGJun 11 · first · this page

New Hampshire State AG+6d

Massachusetts State AG+7d

Pattern: first filing Jun 11 (MT), last Jun 18 (MA) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Breach-Notification-Details.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 11, 2019
Raw hash: 52252e678e980f77a4c01ba43dcb1c2b02ed8efe8bca03b4104c08e82220a672

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityHood & Associates CPAs, PC

Victim entityHood & Associates CPAs, PC

IncidentUnauthorized Access

Stated responseWorked with legal counsel and leading computer forensic specialists to investigate the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov