Satty, Levine & Ciacco CPA's P.C.

The Maine Office of the Attorney General disclosed that Satty, Levine & Ciacco CPA's P.C. suffered an external system breach (hacking) discovered on April 16, 2024. The incident involved unauthorized access to a ShareFile account, compromising sensitive personal data of 1,041 individuals, including 2 Maine residents. Exposed information included names, contact details, Social Security numbers, and financial records, posing significant risks of identity theft, financial fraud, and reputational harm. The breach targeted a third-party file-sharing platform, highlighting vulnerabilities in external vendor security. While the full scope of misuse remains under investigation, the exposure of highly sensitive financial and personally identifiable information (PII) elevates the severity, particularly given the potential for long-term harm to affected individuals, including tax fraud or unauthorized financial transactions. The firm has likely faced regulatory scrutiny and may incur liabilities under data protection laws (e.g., state breach notification statutes).

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5c018e51-30a0-4666-b260-4247f356093d.html

TPRM report: https://www.rankiteo.com/company/satty-levine-&-ciacco-cpas-p-c-

"id": "sat041091825",
"linkid": "satty-levine-&-ciacco-cpas-p-c-",
"type": "Breach",
"date": "4/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1041,
                        'industry': 'Professional Services (Accounting)',
                        'name': "Satty, Levine & Ciacco CPA's P.C.",
                        'type': 'Accounting Firm'}],
 'attack_vector': 'Unauthorized Access to ShareFile Account',
 'data_breach': {'number_of_records_exposed': 1041,
                 'personally_identifiable_information': ['Names',
                                                         'Contact Information',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High (PII and Financial Data)',
                 'type_of_data_compromised': ['Personal Information',
                                              'Financial Information']},
 'date_detected': '2024-04-16',
 'description': 'The Maine Office of the Attorney General reported that Satty, '
                "Levine & Ciacco CPA's P.C. experienced an external system "
                'breach (hacking), discovered on April 16, 2024, affecting a '
                'total of 1,041 individuals, including 2 residents of Maine. '
                'The breach involved unauthorized access to a ShareFile '
                'account, resulting in the potential exposure of sensitive '
                'personal information such as names, contact information, '
                'Social Security numbers, and financial details.',
 'impact': {'data_compromised': ['Names',
                                 'Contact Information',
                                 'Social Security Numbers',
                                 'Financial Details'],
            'identity_theft_risk': 'High (PII and Financial Data Exposed)',
            'payment_information_risk': 'High (Financial Details Exposed)',
            'systems_affected': ['ShareFile Account']},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': "Satty, Levine & Ciacco CPA's P.C. External System Breach (Hacking)",
 'type': 'External System Breach (Hacking)'}