HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

H.N.R. Clark, Inc.

bd_df65505eacdea205 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 13, 2020

Filed

Dec 10, 2020

To disclose

8 weeks

Affected · nationwide

522 in this filing

Linked

4 filings

Confidence

66%

Full breach record for H.N.R. Clark, Inc. →

H.N.R. Clark, Inc. notified Montana residents of a data breach involving unauthorized access to an email account via stolen credentials, potentially exposing tax return data (names, addresses, SSNs) for approximately 52 individuals. The incident was discovered on October 13, 2020, after notification from tax software provider Intuit. The firm engaged forensic investigators, reset passwords, enabled MFA, and offered 24 months of identity theft protection.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 42 days

discovery → filing · 8 weeks / 58 days

Sep 1, 2020

Begins

Oct 13, 2020

Discovered

Dec 10, 2020

Filed

vs. sector median

10 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

California State AGbd_b694c9f15a01d0942020-12-10Candidate
Massachusetts State AGbd_b7544e174a5c622f2020-12-10Verified
Indiana State AGbd_c8877ea4143fff152020-12-10Verified

Name: H.N.R. Clark, Inc.
norm: hnr clark
Domain: hnrclark.com

Name: H.N.R. Clark, Inc.
norm: hnr clark
Domain: hnrclark.com
Industry: Professional Servicesllm

Discovered: Oct 13, 2020
Breach occurred: Sep 1, 2020 – Oct 31, 2020
Undetected for: 42 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 10, 2020
Affected individuals: 52state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Third party: via Lacerte Intuit
Initial access: valid_credentials

During the incident: Engaged a specialized cybersecurity firm to conduct a forensic investigation
Changed all computer passwords
Improved computer security settings by enabling multi-factor authentication for Lacerte tax preparation system
Deploying a new email system with higher levels of spam filtering and threat protection
Transmitting confidential information via encrypted email
Upgraded network security with a new firewall
Wiped all computers and reinstalled operating systems and applications
Installed latest version of virus protection
Offering identity theft protection services through IDX
Changes made: Enabled multi-factor authentication for Lacerte tax preparation system
Deployed new email system with higher spam filtering and threat protection
Upgraded network security with a new firewall
Reinstalled operating systems and applications on all computers
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(58 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

California State AGDec 10 · first

Massachusetts State AGDec 10 · first

Indiana State AGDec 10 · first

Montana State AGDec 10 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/hnrSamp.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 10, 2020
Raw hash: 8f6e2928931638c31e62ecadb7f1232d9ce3a19cb025112570bb926fd19c783d

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityH.N.R. Clark, Inc.

Victim entityH.N.R. Clark, Inc.

Incidentdiscovered Oct 13, 2020

Stated responseEngaged a specialized cybersecurity firm to conduct a forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov