Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIALMediumContained
TaxSquad
bd_de4773b2ff541895 · schema v1 · pii pii-v1
Full breach record for TaxSquad →TaxSquad, a tax preparation service, notified California AG and affected individuals of a data breach involving unauthorized access to employee email accounts. The incident, discovered August 22, 2022, potentially exposed client names, DOBs, addresses, SSNs, and tax info. TaxSquad offered one year of Experian IdentityWorks credit monitoring.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_ed0e154cc9a734b5New Hampshire State AGfiled 2022-10-28Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-558712
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 28, 2022
- Raw hash
- c827d61bc9533747f9d7ef0d5a3cab06ce185658205d4f600bfeac1deb405361
Reporting entity
- Name
- TaxSquadnorm: taxsquad
Victim entity
- Name
- TaxSquadnorm: taxsquad
Incident
- Discovered
- Aug 22, 2022
- Materiality determined
- Oct 28, 2022
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Submitted Breach Notification to California Office of the Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.