Edwards CPA Group P.C.

The Maine Office of the Attorney General disclosed a data breach targeting Edwards CPA Group P.C. on September 27, 2024, stemming from an external hacking incident discovered on June 27, 2024. The breach compromised the personal data of 642 individuals, including 7 residents of New Hampshire, exposing highly sensitive information such as names, addresses, birthdates, and Social Security Numbers (SSNs). The incident was classified as an external system breach, indicating unauthorized access by malicious actors. The exposed data particularly SSNs poses severe risks, including identity theft, financial fraud, and long-term reputational harm for affected individuals. Given the nature of the compromised information (financial and personally identifiable data), the breach carries significant legal, operational, and trust-related consequences for the firm. While the exact attack vector (e.g., phishing, exploit of unpatched vulnerabilities) was not specified, the intentional hacking suggests a targeted cyber attack rather than an accidental exposure. The breach’s impact extends beyond immediate financial risks, potentially triggering regulatory penalties, client attrition, and erosion of professional credibility in the accounting sector, where data security is paramount.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/89bddfe4-122f-4f6e-b6b5-4bac20ad6bc6.html

TPRM report: https://www.rankiteo.com/company/steven-edwards-&-associates-a-cpa-firm-

"id": "ste824090125",
"linkid": "steven-edwards-&-associates-a-cpa-firm-",
"type": "Breach",
"date": "6/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 642,
                        'industry': 'Financial Services / Accounting',
                        'name': 'Edwards CPA Group P.C.',
                        'type': 'Accounting Firm'}],
 'attack_vector': 'Hacking (External System Breach)',
 'data_breach': {'number_of_records_exposed': 642,
                 'personally_identifiable_information': ['Names',
                                                         'Addresses',
                                                         'Birthdates',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2024-06-27',
 'date_publicly_disclosed': '2024-09-27',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Edwards CPA Group P.C. The breach was '
                'identified as an external system breach due to hacking, '
                'impacting 642 individuals, including 7 residents from New '
                'Hampshire, with potential exposure of names, addresses, '
                'birthdates, and Social Security Numbers.',
 'impact': {'data_compromised': ['Names',
                                 'Addresses',
                                 'Birthdates',
                                 'Social Security Numbers'],
            'identity_theft_risk': 'High (PII exposed)'},
 'references': [{'date_accessed': '2024-09-27',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Public disclosure via Maine Office of '
                                        'the Attorney General'},
 'title': 'Data Breach at Edwards CPA Group P.C.',
 'type': 'Data Breach'}