Baker Tilly Advisory Group data breach

Baker Tilly Advisory Group announced a data breach on Nov 9, 2026, exposing names, addresses and Social Security numbers. The number of people affected has not been disclosed. It happened through a vendor (Unnamed third-party platform provider). No settlement or compensation has been announced.

What happened

US accounting and advisory firm Baker Tilly is notifying clients and their dependents that an unauthorized actor obtained client data stored on a platform run by a third-party service provider it uses to serve clients. Baker Tilly learned of the incident on September 6, 2026 and finished identifying whose information was involved on October 28; the California attorney general's listing gives the breach date as September 2. The firm has not published a total, but the Texas attorney general's portal lists 10,456 affected Texans and names, addresses and Social Security numbers among the exposed data. Baker Tilly says it has no evidence of activity on its own network and is offering 24 months of credit and identity monitoring through Experian.

What should I do?

1. Enroll in the 24 months of free Experian credit and identity monitoring offered in your letter before its deadline.
2. Freeze your credit for free at Equifax, Experian and TransUnion, including for dependents named on your returns.
3. Request an IRS Identity Protection PIN so nobody can file a tax return with your Social Security number.
4. Be wary of emails or calls that claim to be from Baker Tilly or your accountant asking for documents, payments or login details; verify by calling a known number.

More data breaches in the United States →

Check the other services you use →