Baker Tilly Advisory Group, LP disclosed a data breach that originated from unauthorized access to data stored on an unnamed third-party service provider's platform. The incident occurred on September 2, 2026, and was discovered by the firm on September 6, 2026. After completing an internal data review on October 28, 2026, Baker Tilly submitted regulatory breach notifications, including filings with state attorneys general, and began mailing notification letters to affected individuals on November 9, 2026.
Confirmed compromised information includes full names, addresses, and Social Security numbers. State regulatory filings confirm at least 10,456 affected residents in Texas and 111 residents in Rhode Island. Unverified secondary reports state that as many as 195,512 individuals may be impacted nationwide, but official confirmation of a comprehensive nationwide total remains unavailable.
The investigation determined that the breach was confined to the external service provider platform and did not compromise Baker Tilly's internal network or systems. As investigations and regulatory reviews proceed, updated details regarding total affected counts or additional data categories may emerge.