Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
TaxSquad
bd_ed0e154cc9a734b5 · schema v1 · pii pii-v1
Full breach record for TaxSquad →TaxSquad reported a data security incident to the New Hampshire Attorney General on October 28, 2022. Suspicious activity was identified in its email environment on August 22, 2022. The incident involved the compromise of email accounts, potentially exposing personal information including names, dates of birth, addresses, Social Security numbers, and tax-related data of two New Hampshire residents. TaxSquad secured the accounts, engaged forensic investigators, and offered credit monitoring services.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_de4773b2ff541895California State AGfiled 2022-10-28Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/taxsquad-20221028.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 28, 2022
- Raw hash
- affa5f41d5b3aa33433ed09b0131019d8196e84785ec69b93412cce8bdaadbb9
Reporting entity
- Name
- TaxSquadnorm: taxsquad
Victim entity
- Name
- TaxSquadnorm: taxsquad
Incident
- Discovered
- Aug 22, 2022
- Materiality determined
- —
- Notification sent
- Oct 28, 2022
- Affected individuals
- 2
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified the Office of the Attorney General of the State of New Hampshire
- Initial access
- phishing_link
Compliance
- Time to disclose
- 10 weeks(67 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.