HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumResolved

CBIZ Accounting, Tax & Advisory of Utah

bd_dcfdb7d7e735a80a · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 30, 2021

To disclose

—

Affected

2state residents only

Linked

4 filings

Confidence

66%

Full breach record for CBIZ Accounting, Tax & Advisory of Utah →

CBIZ Accounting, Tax & Advisory of Utah, LLC notified the NH Attorney General of unauthorized access to an employee's email account on December 30, 2020. The investigation determined that an attachment contained the name, Social Security number, and financial account number of two New Hampshire residents. The company secured the account, engaged a forensic firm, and offered one year of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 30, 2020

Begins

Mar 30, 2021

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Montana State AGbd_5499436a6e80cc002021-03-30Candidate
Massachusetts State AGbd_9d745b0e863163d22021-03-30Verified
Indiana State AGbd_eb816cf6d06e382f2021-03-30Verified

Name: CBIZ Accounting, Tax & Advisory of Utah
norm: cbiz accounting tax advisory of utah

Name: CBIZ Accounting, Tax & Advisory of Utah
norm: cbiz accounting tax advisory of utah
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Dec 30, 2020
Materiality determined: —
Notification sent: Mar 30, 2021
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Office of the Attorney General

During the incident: Secured the employee’s email account
Launched an investigation to determine the nature and scope of the incident
Engaged a computer security firm to assist
Undertook a review of the emails and attachments
Providing notice via postal mail to the potentially affected New Hampshire residents
Offered the New Hampshire residents involved a complimentary one-year membership in credit monitoring services through Kroll
Changes made: Implemented additional safeguards and technical security measures to further protect personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Montana State AGMar 30 · first

Massachusetts State AGMar 30 · first

Indiana State AGMar 30 · first

New Hampshire State AGMar 30 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cbiz-accounting-tax-advisory-utah-20210330.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 30, 2021
Raw hash: 744da44cecb25eb2aae75b95f0c2e1eae3ac8d1143b66b17ce1b424ab46b2c51

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCBIZ Accounting, Tax & Advisory of Utah

Victim entityCBIZ Accounting, Tax & Advisory of Utah

IncidentUnauthorized Access

Stated responseSecured the employee’s email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov