HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALSMediumContained
Caputo & Associates
bd_f9d50705392cf45e · schema v1 · pii pii-v1
Full breach record for Caputo & Associates →Caputo & Company, PC, a CPA firm in Danvers, MA, experienced an external network breach between March 12–14, 2025. An unknown actor accessed and/or acquired files containing personal information including names, Social Security numbers, driver's license/state ID numbers, and financial account information. The breach was discovered on March 27, 2025. Eight Maine residents were affected out of 674 total. Affected individuals were offered 24 months of credit monitoring through Cyberscout.
Maine clockDiscovered Mar 27, 2025 → Filed with AG Apr 17, 202521d ✓ ME AG ≤30d21 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_3ccb16b277cba565Indiana State AGfiled 2025-04-17Verified
- bd_6bc21c8e8d64ed96Vermont State AGfiled 2025-04-17Verified
- bd_3b632b353228c106New Hampshire State AGfiled 2025-04-25(8d gap)Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/9bbf9924-917d-4d29-a760-899c7a6bc6ca.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 17, 2025
- Raw hash
- e12edd1e75109817f96a2c6ee543a9e8f28626ef38843c2a2964e7bed99355a5
Reporting entity
- Name
- Caputo & Associatesnorm: caputo associates
- Domain
- cacpas.org
- Industry
- Financial Services
Victim entity
- Name
- Caputo & Associatesnorm: caputo associates
- Domain
- cacpas.org
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Mar 27, 2025
- Materiality determined
- —
- Notification sent
- Apr 17, 2025
- Affected individuals
- 8
- Data types
- PIIIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Maine Attorney General notifiedFederal law enforcement notified
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 21d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Mar 27, 2025→ Filed with AG: Apr 17, 202521d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.