HackingProfessional ServicesProfessional ServicesStolen CredentialsCustomer Data InvolvedDelayed DiscoveryGovernment IDIdentity (basic)MediumContained

Theresa Gordon Tax Services

bd_eabfc1cb4743e9b3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 12, 2024

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

65%

Full breach record for Theresa Gordon Tax Services →

Theresa Gordon Tax Services, Inc. reported unauthorized access to its tax filing applications between May 21, 2023, and July 12, 2023. The incident potentially exposed clients' Social Security numbers and other personal information. The company coordinated with the IRS, obtained a new EFIN, and engaged cybersecurity professionals. Multi-factor authentication was enforced on tax application providers. Complimentary identity restoration services were offered to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

May 21, 2023

Begins

Sep 12, 2024

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Montana State AGbd_20f4564cfd93bda12024-09-12Candidate

Name: Theresa Gordon Tax Services
norm: theresa gordon tax

Name: Theresa Gordon Tax Services
norm: theresa gordon tax
Industry: Professional Servicesllm

Discovered: —
Breach occurred: May 21, 2023 – Jul 12, 2023
Materiality determined: —
Notification sent: Sep 18, 2024
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Coordinated with the IRS

During the incident: Coordinated with the IRS to provide them with more information
Obtained a new EFIN number
Provided specific information to the IRS in order to protect TG Tax Services clients from potential fraudulent returns
Reached out to its tax application providers to ensure that their security systems were revised and that multi-factor authentication was enforced
Launched an investigation in consultation with outside cybersecurity professionals
Changes made: Ensured tax application providers revised security systems
Enforced multi-factor authentication
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Montana State AGSep 12 · first

California State AGSep 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-591556
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 12, 2024
Raw hash: e778cd997ce64f5927b6669bccd559e25a706c1b22596a82534b9cd4ffef8583

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityTheresa Gordon Tax Services

Victim entityTheresa Gordon Tax Services

IncidentUnauthorized Access

Stated responseCoordinated with the IRS to provide them with more information

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov