Science & Tech · Cybersecurity · 1 hr ago
Baker Tilly reports client data breach at third-party provider
Baker Tilly says a third-party provider suffered a data breach involving information about some of the firm’s clients and their dependents.
The U.S. accounting firm learned of the incident on September 6, 2026, and finished reviewing the affected data on October 28.
Texas records list 10,456 affected people in the state, but Baker Tilly has not said how many people were affected overall.
The firm’s notice does not specify the exposed data, while the Texas records list names, addresses and Social Security numbers among the information involved.
Baker Tilly says it has no evidence of activity on its own network and no reports of identity theft or fraud linked to the exposure.
Affected people can get 24 months of credit and identity monitoring through Experian; the company says it contained the incident, hired outside experts and notified law enforcement.
Baker Tilly says a breach at a third-party provider compromised personal information about some clients and their dependents.
The firm became aware of the incident on September 6, 2026, and completed its review of affected data on October 28.
The provider and the total number of affected clients have not been identified.
Texas records list 10,456 affected individuals and include Social Security numbers, full names and addresses among the exposed data.
Baker Tilly says it has no reports of identity theft or fraud linked to the breach and is offering affected individuals 24 months of credit and identity monitoring.
- Who
- Baker Tilly and some of its clients and their dependents. The unauthorized actor was not identified.
- What
- An unauthorized actor obtained data relating to certain Baker Tilly clients from a third-party provider’s platform.
- When
- Baker Tilly became aware of the incident on September 6, 2026, and completed its data review on October 28. The notification date is not stated.
- Where
- On a platform operated by an unnamed third-party service provider. Texas records report 10,456 affected individuals in the state.
- Why
- Not stated.
This story does not have two clearly opposing sides.
Baker Tilly became aware of a potential cybersecurity incident involving information on a third-party provider’s platform.
Baker Tilly completed its review of the affected data and identified whose information was involved.
- Affected individuals in Texas
- 10,456
- Data types listed in Texas records
- Social Security numbers, full names, addresses and other information
- Credit and identity monitoring
- 24 months through Experian
- Affected platform
- Operated by an unnamed third-party service provider
What people are saying
On September 6, 2026, Baker Tilly became aware of a potential cybersecurity incident involving certain information stored on a platform operated by a third-party service provider used by Baker Tilly in connection with services we provide to clients
The unauthorized actor was able to obtain data relating to certain Baker Tilly clients