Threat watch / Breach
Baker Tilly: client data, Social Security numbers included, taken from a service provider's platform
Baker Tilly Advisory Group, the US accounting and advisory firm, is notifying clients and their dependents, children included, that an unauthorised actor obtained client data from a platform operated by one of its third-party service providers. It became aware of the incident on September 6, 2026 and finished reviewing the affected data on October 28. SecurityWeek reports Social Security numbers were stolen and that state filings point to more than 10,000 victims in Texas alone.
- Sector
- Finance
- Way in
- Supplier
- Product or vendor
- Baker Tilly
- victims in Texas alone, according to state filings cited by SecurityWeek (no national total published)[2]
- 10,000+
- How it happened
- According to Baker Tilly's notice, the unauthorised actor obtained the data from "a platform operated by a third-party service provider used by Baker Tilly". The provider is not named, and how its platform was breached is not public. Baker Tilly says it found no evidence of continued unauthorised access to its own network or systems.[1] Checked 13 Nov 2026
- What was stolen
- Personal information of certain Baker Tilly clients and of their dependents, including Social Security numbers, according to SecurityWeek. The published notice template does not list the data elements.[1][2] Checked 13 Nov 2026
- Who was impacted
- Baker Tilly clients and their dependents, children included (a separate letter goes to parents or guardians). More than 10,000 victims in Texas alone, according to state filings cited by SecurityWeek; the notice filed in Massachusetts mentions 111 Rhode Island residents notified. No national total is published.[1][2] Checked 13 Nov 2026
- Threat actor
- Not attributed
Timeline
- Baker Tilly becomes aware of a potential cybersecurity incident, according to its notice. [1]
- Baker Tilly completes its review of the affected data. [1]
- Baker Tilly dates its notification letters to clients and to parents of affected children, offering 24 months of Experian IdentityWorks credit monitoring. It says law enforcement was notified. [1]
- SecurityWeek reports the breach: hackers stole personal information, including Social Security numbers, from a service provider's platform, with more than 10,000 victims in Texas alone according to state filings. [2]