Baker Tilly Notifies Clients of Data Breach at Third-Party Provider Exposing Personal Information
Baker Tilly Advisory Group has begun notifying clients that a data breach at a third-party service provider has exposed personal information belonging to clients and their dependents. The firm discovered the incident on September 6, 2026, and completed its review of affected data on October 28, confirming that an unauthorized actor obtained client-related records stored on the provider's platform. Although the notification does not specify the total number of impacted individuals or name the service provider, data from the Office of the Texas Attorney General indicates that 10,456 Texas residents alone had Social Security numbers, full names, addresses, and other personal details exposed. Baker Tilly states it took immediate containment steps, engaged external investigators, and notified law enforcement, while confirming no evidence of unauthorized activity on its own networks and no reported cases of identity theft or fraud linked to the incident. Affected individuals are being offered 24 months of credit and identity monitoring services through Experian. BleepingComputer has not received additional details from the company and found no ransomware group claims associated with the breach.
BleepingComputerNov 11, 2026Translated from English