Social EngineeringProfessional ServicesProfessional ServicesPhishingStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDMediumResolved

Amin Dean, CPA

bd_e9ea61350c50b481 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 31, 2021

Filed

Oct 27, 2021

To disclose

13 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Amin Dean, CPA →

Amin Dean, CPA notified clients that an email containing malware sent on July 8, 2021, gave unauthorized access to an office computer. The breach was discovered in late July 2021. Affected data included names, contact information, and Social Security numbers. The firm removed malware, changed passwords, engaged security experts, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 23 days

discovery → filing · 13 weeks / 88 days

Jul 8, 2021

Begins

Jul 31, 2021

Discovered

Oct 27, 2021

Filed

vs. sector median

5 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Amin Dean, CPA
norm: amin dean cpa

Name: Amin Dean, CPA
norm: amin dean cpa
Industry: Professional Servicesllm

Discovered: Jul 31, 2021
Breach occurred: Jul 8, 2021
Undetected for: 23 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.001 Spearphishing AttachmentT1078 Valid Accounts
Threat actor: External
Initial access: phishing_attachment

During the incident: Engaged professional security experts
Removed all malware
Changed account passwords
Conducted a thorough investigation
Provided one year of complimentary credit and fraud monitoring services
Provided identity theft insurance at no cost
Changes made: Made immediate enhancements to systems, security and practices
Engaged appropriate experts to assist in conducting a full review of security practices and systems
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 weeks(88 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-546953
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 27, 2021
Raw hash: c28ea4c15df163ec85613ab47ee9a938e019c7dd4c3360877f4580c8eda0f850

Reporting entityAmin Dean, CPA

Victim entityAmin Dean, CPA

Incidentdiscovered Jul 31, 2021

Stated responseEngaged professional security experts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov