Notice of Data Incident Regarding Stallcup & Associates

SAN FRANCISCO, March 22, 2017 /PRNewswire/ -- On January 10, 2017, Stallcup & Associates became aware that some of their clients received an email from Stallcup & Associates' office that they did not send. Upon discovery of this fraudulent activity, Stallcup & Associates sent an email alerting their clients not to open the email. They also immediately contacted their local IT consultant, secured the email account, and promptly hired forensic IT specialists to determine exactly what happened and what information and systems were affected. The forensic investigation was completed and the unauthorized access was limited to the one email account.

While there is no evidence of data viewing or exfiltration of information, the fraudulent person(s) did obtain the employee's email credentials and therefore had access to the contents of that email account. 

The information that was potentially fraudulently accessed included any information sent or received on the employee email account, michelle(at)stallcupcpas.com, including attachments. This information may have included copies of any information exchanged on the email account.

In addition to the steps outlined above, Stallcup & Associates notified the FBI, and is reviewing office policies and procedures to ensure all security measures are taken to avoid such an incident from occurring again. 

Given the nature of the information potentially exposed, Stallcup & Associates' strongly recommends that any account numbers that were exchanged on this email account, including bank and brokerage accounts, and credit card numbers, be changed. Further, Stallcup & Associates strongly recommends that potentially affected persons and entities contact the three credit bureaus and place a fraud alert on their accounts. Contact information is: Equifax (1-888-766-0008; P.O. Box 740241, Atlanta, GA 30374), Experian (1-888-397-3742; P.O. Box 4500, Allen, TX 75013), and TransUnion (1-800-680-7289; P.O. Box 2000, Chester, PA 19022-2000). Lastly, affected persons/entities are entitled to a free credit report every year from each of the three credit bureaus agencies at www.annualcreditreport.com and one year of complimentary credit monitoring has been purchased for you should you be affected. 

Protecting your information is incredibly important to Stallcup & Associates. If you have any concerns or believe you may be affected, please call at 1-844-873-9050, or write at 2595 Mission Street, Suite 300, San Francisco, CA 94110.

SOURCE Stallcup & Associates, CPAs