DisclosureLens
HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Financial accountFinancial credentialsLow

Karp, Ackerman, Small & Hogan, CPAs, PC

bd_ec22da8e2700c6e1 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 22, 2021

Filed

Jul 24, 2021

To disclose

5 weeks

Affected · nationwide

8625 in this filing

Linked

5 filings

Confidence

50%
Full breach record for Karp, Ackerman, Small & Hogan, CPAs, PC →3 incidents on file

Karp, Ackerman, Small & Hogan, CPAs, PC, a financial services firm, reported an external system breach that occurred between April 29, 2020, and July 2, 2020. The breach was discovered on June 22, 2021. The incident affected 5 Maine residents. The compromised information included names and financial account numbers or credit/debit card numbers with their corresponding security codes, access codes, or PINs. The company offered 12 months of complimentary credit monitoring services to individuals whose Social Security numbers were impacted.

Maine clockDiscovered Jun 22, 2021 → Filed with AG Jul 24, 202132d ⏱ ME AG >30d5 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 419 days
discovery → filing · 5 weeks / 32 days

Apr 29, 2020

Begins

Jun 22, 2021

Discovered

Jul 24, 2021

Filed

vs. sector median

4 wks faster

This filing is one of 5 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGJul 22 · first
Montana State AGJul 22 · first
Massachusetts State AG+2d
Maine State AG+2d · this page
New Hampshire State AG+7d

Pattern: first filing Jul 22 (IN), last Jul 29 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.