Fitzgerald, DePietro & Wojnas CPAs, P.C.

The Vermont Office of the Attorney General disclosed a data breach affecting Fitzgerald, DePietro & Wojnas CPAs, P.C. on October 9, 2024. The incident, detected on June 19, 2024, involved unauthorized access to the firm’s network, compromising sensitive personal information. The exposed data included names, Social Security numbers, and financial details of individuals, though the exact number of affected parties remains undetermined as of August 26, 2024.The breach poses significant risks, as the leaked information (SSNs and financial records) can facilitate identity theft, financial fraud, or targeted phishing attacks against victims. Given the nature of the exposed data highly sensitive and directly tied to individuals’ financial and personal identities the incident carries severe implications for both the affected individuals and the firm’s reputation. The prolonged gap between discovery (June 19) and public disclosure (October 9) may further exacerbate trust issues, potentially leading to regulatory scrutiny or legal repercussions.As a CPA firm, the company handles confidential client data, making this breach particularly damaging to its credibility. The lack of clarity on the number of victims adds uncertainty, but the exposure of SSNs and financial details alone classifies this as a high-severity incident with lasting consequences for those impacted.

Source: https://ago.vermont.gov/document/2024-10-09-fitzgerald-depietro-wojnas-cpas-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/fitzgerald-depietro-wojnas-cpas-pc

"id": "fit551091725",
"linkid": "fitzgerald-depietro-wojnas-cpas-pc",
"type": "Breach",
"date": "6/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown (as of 2024-08-26)',
                        'industry': 'Financial Services / Accounting',
                        'location': 'Vermont, USA',
                        'name': 'Fitzgerald, DePietro & Wojnas CPAs, P.C.',
                        'type': 'Accounting Firm'}],
 'data_breach': {'number_of_records_exposed': 'Unknown (as of 2024-08-26)',
                 'personally_identifiable_information': ['names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Information']},
 'date_detected': '2024-06-19',
 'date_publicly_disclosed': '2024-10-09',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Fitzgerald, DePietro & Wojnas CPAs, P.C. The '
                'breach involved unauthorized access to their network, '
                'impacting personal information including names, Social '
                'Security numbers, and financial details of affected '
                'individuals.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 'financial details'],
            'identity_theft_risk': 'High (SSNs and financial details exposed)',
            'payment_information_risk': 'High (financial details exposed)'},
 'investigation_status': 'Ongoing (as of 2024-08-26, number of affected '
                         'individuals remains unknown)',
 'references': [{'date_accessed': '2024-10-09',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Vermont Office '
                                        'of the Attorney General'},
 'title': 'Data Breach at Fitzgerald, DePietro & Wojnas CPAs, P.C.',
 'type': 'Data Breach'}