Baker Tilly notifies clients of data breach at third-party provider - BleepingComputer
Baker Tilly Advisory Group is notifying clients of a data breach that compromised personal information about them and their dependents.
The breach occurred on a platform operated by a third-party service provider used by Baker Tilly. The company completed its review of affected data on October 28, identifying whose information was compromised. While the notification doesn't specify the number of impacted clients globally, Texas authorities report 10,456 individuals affected in that state alone.
Breach Details
According to Baker Tilly's notification, "On September 6, 2026, Baker Tilly became aware of a potential cybersecurity incident involving certain information stored on a platform operated by a third-party service provider." The exposed data includes Social Security numbers, full names, addresses, and other personal information.
The unauthorized actor was able to obtain data relating to certain Baker Tilly clients.
Response and Mitigation
After discovering the incident, Baker Tilly took immediate steps to contain it, contracted external experts to investigate, and notified law enforcement. The firm states it has no evidence of unauthorized activity on its own network and no reports of identity theft or fraud linked to the exposure.
To mitigate risks, Baker Tilly is offering affected individuals 24 months of credit and identity monitoring through Experian. The accounting firm, which operates in 147 countries and reports $6.8 billion in annual revenue, continues to investigate the full scope of the breach.
Related
