BMB Associates, Inc.

BMB Associates discovered unauthorized access to its Intuit ProSeries service on March 16, 2020, when IRS e-file rejections indicated fraudulent tax filings by a third party who created a guest account. The attacker potentially accessed names, addresses, SSNs, and financial account information. The company removed the account, changed passwords, and notified law enforcement and the IRS. Identity theft protection was offered to clients.

BMB Associates, a financial services entity based in Stockton, CA, reported an external system breach (hacking) on April 2, 2020. The incident affected 2,318 individuals, including 3 Maine residents. Compromised data included names and financial account numbers (combined with security codes/PINs). The company provided written notification on September 4, 2020, and offered 12 months of identity theft protection services.

Affected (this filing): 2,318