🐻California State AGFirst filing
Filed Jul 20, 2017bd_0346fcfb8345a62c
Kevin J Palmer & Co, CPA, a California-based CPA firm, disclosed a cyberattack occurring between May 21 and June 6, 2017. Cybercriminals exploited a remote-access system used by outside IT personnel, utilizing a staff member's credentials to access tax filing software. The attackers filed fictitious federal tax returns to fraudulently claim refunds. Affected data included names, SSNs, W-2s, 1099s, and bank account details. The firm engaged forensic investigators, secured systems, changed credentials, and partnered with Equifax to provide 12 months of identity theft protection.
CA 60-day OK · 38d