Baker Tilly Advisory Group is alerting clients that a data breach has exposed certain personal information belonging to them and their dependents. The firm said the compromised data was held on a platform run by a third-party service provider that Baker Tilly uses to deliver client services. The unauthorized party was able to obtain data tied to certain Baker Tilly clients, according to the notification sent to customers.
Baker Tilly said it became aware of a potential cybersecurity incident on September 6, 2026, and finished reviewing the affected data on October 28, when it determined whose information was involved. The notification does not say how many clients were affected, does not identify the third-party provider, and leaves the specific categories of exposed data listed as a placeholder.
Data filed with the Office of the Texas Attorney General shows the firm reported 10,456 impacted individuals in Texas alone. That filing lists Social Security numbers, full names, addresses and other information as the exposed data types.
Baker Tilly is a major U.S. accounting firm offering auditing, tax planning, compliance, advisory and business operations services. It operates in 147 countries and reports annual revenue of $6.8 billion.
According to the company, it moved quickly to contain the incident after discovering it, brought in outside experts to investigate and notified law enforcement. Baker Tilly also said it has found no evidence of unauthorized activity on its own network and has received no reports of identity theft or fraud connected to the exposure of client information.
The firm is offering affected individuals 24 months of credit and identity monitoring through Experian to reduce the risks stemming from the incident. BleepingComputer reported that it asked Baker Tilly for more details about the breach, including its source, the number of affected customers and the types of data compromised, but had not received a reply at the time of publication. The outlet also said it found no announcements from ransomware groups claiming the attack.
More cybersecurity news from TechManNews.
