HackingProfessional ServicesProfessional ServicesStolen CredentialsTargetedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Krehbiel and Associates CPA

bd_f7b4426f842a6b3f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 27, 2017

Filed

Mar 30, 2017

To disclose

4 weeks

Affected

1state residents only

Confidence

65%

Full breach record for Krehbiel and Associates CPA →

Krehbiel & Associates, CPA reported unauthorized access to its systems between Feb 2-13, 2017, discovered on Feb 27, 2017, after IRS fraud notifications. Access may have exposed client names, SSNs, addresses, wages, and bank account info. The firm engaged forensic investigators and provided one year of free credit monitoring via Kroll. Remediation included password resets and security protocol reviews.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 25 days

discovery → filing · 4 weeks / 31 days

Feb 2, 2017

Begins

Feb 27, 2017

Discovered

Mar 30, 2017

Filed

vs. sector median

14 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: Krehbiel and Associates CPA
norm: krehbiel and associates cpa

Name: Krehbiel and Associates CPA
norm: krehbiel and associates cpa
Industry: Professional Servicesllm

Discovered: Feb 27, 2017
Breach occurred: Feb 2, 2017 – Feb 13, 2017
Undetected for: 25 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: valid_credentials

During the incident: Hired a computer forensics firm
Arranged for credit monitoring and identity restoration services from Kroll at no cost for one year
Changes made: Resetting all employee passwords
Reviewing internal security protocols and technologies
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/Krehbiel-and-Associates-CPA.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 30, 2017
Raw hash: ec6c7ccde9b5e4c1443afd3d89997bac4a4fc09826e53f7ace4787fe8b2d7d36

Reporting entityKrehbiel and Associates CPA

Victim entityKrehbiel and Associates CPA

Incidentdiscovered Feb 27, 2017

Stated responseHired a computer forensics firm

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov