Stallcup & Associates, CPAs

Stallcup & Associates CPAs experienced an email data incident on January 10, 2017, where an employee's email account was compromised. The attacker obtained email credentials and sent fraudulent emails to clients. The firm notified clients, re-secured the account, engaged forensic specialists, and notified the FBI. Affected data included names, addresses, SSNs, and financial/tax information.

Stallcup & Associates CPAs reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2016-09-21. 17 Massachusetts residents were affected. The report records the breach type as electronic.

Stallcup & Associates, CPAs notified clients of a ransomware incident on July 11, 2016, where network files were encrypted. No evidence of exfiltration was found, but client tax info (SSN, DOB, financial data) was on the same drive. The firm engaged forensic investigators, removed malware, and provided 12 months of identity protection. Notices were sent on September 21, 2016.

Stallcup & Associates, CPAs experienced a ransomware incident on July 11, 2016, where network files were encrypted. The firm detected the virus within an hour and contained it. No evidence of data exfiltration was found, but client tax information (including SSNs, bank account details, and W-2s) was on the affected drives. The firm engaged forensic investigators, notified the FBI and credit agencies, and offered 12 months of identity protection to affected individuals.