Richard W. Fuller CPA Listed by 8Base Ransomware Group

On December 27, 2022, the accounting firm Richard W. Fuller CPA appeared on the leak site operated by the 8base ransomware group. The listing states that internal files were exfiltrated during a ransomware attack on the Glens Falls, New York practice, which serves clients across the Capital District and North Country. The disclosure does not quantify how many individuals or businesses may have had data exposed, nor does it list the specific documents taken.

Details in the 8base Listing

The primary disclosure on the 8base leak site indicates that Richard W. Fuller CPA suffered a ransomware incident in which attackers successfully exfiltrated internal files before encrypting systems. No victim count, ransom amount, or exact data inventory appears in the posting. The firm’s public description of its services — tax preparation, financial planning, and personalized client support — suggests the stolen files could contain sensitive client tax returns, Social Security numbers, bank details, and correspondence. The leak site gave the company a deadline to negotiate or face full publication of the archive.

Why This Matters for You and Your Family

If you or any member of your family used Richard W. Fuller CPA for tax preparation, bookkeeping, or financial advice between the firm’s founding and late 2022, your personal financial records may now sit in an attacker-controlled archive. Tax documents and financial statements are especially dangerous when leaked because they contain permanent identifiers — Social Security numbers, dates of birth, addresses, and income history — that do not expire. A single exposure like this can fuel years of identity theft, fraudulent loan applications, and tax-refund fraud aimed at you or your spouse. Children listed as dependents on the same returns are also placed at risk because their SSNs travel with the parent’s file.

Doxxing and Identity-Chain Risks

Once financial records leave a professional office and reach a ransomware leak site, they rarely stay isolated. Attackers and subsequent buyers routinely cross-reference the exposed data with usernames, email addresses, and phone numbers found in the same documents. This creates long identity chains that link your real name and address to gaming accounts, social-media handles, and family devices. Credential leaks of this type frequently cascade into account takeovers on Steam, Roblox, or Discord, especially for children’s gaming profiles that reuse an email address appearing in a parent’s tax file. The result is doxxing that can expose your home address, family relationships, and daily routines to harassment or further extortion.

8base’s Known Track Record

Public reporting attributes the emergence of 8base to mid-2022. The group specializes in targeting small and midsize businesses, particularly professional services firms, manufacturers, and healthcare providers. Its typical playbook involves initial access through vulnerable remote-desktop services or phishing, followed by rapid exfiltration of documents before deploying ransomware. 8base maintains a double-extortion model: it threatens both encryption and public leak of stolen data. The group’s leak site has hosted dozens of victims, many of them accounting practices and local service businesses whose client files contained exactly the kind of personally identifiable information now at risk from the Richard W. Fuller CPA incident.

What to do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity drawn from this and prior exposures.
• Rotate any password you ever used at Richard W. Fuller CPA anywhere it has been reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next leak that touches your household is caught and acted on within hours.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts that can be chained back to the same breached address or email.
• Let remediation specialists handle takedown requests across data brokers and extortion sites on your behalf while you focus on securing your own accounts.

The Richard W. Fuller CPA breach is a reminder that even local, long-trusted service providers can become gateways to identity compromise for entire families. Acting quickly on the credentials and documents now circulating can limit how far attackers push the stolen information. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage including children’s gaming accounts give you a practical way to close those gaps before the next wave of abuse begins.