Public accounting firm emc CPAs LLC experienced a data breach on March 10, 2026. The incident affected files containing client information used for tax preparation, tax filing, and refund direct deposit services. Official breach disclosures were submitted to state regulators, including the Massachusetts Attorney General on October 20, 2026, and the Indiana Attorney General.
The compromised records included names, Social Security numbers, dates of birth, and financial account numbers. A total of 3,003 individuals across the United States were affected, including 10 residents in Massachusetts. The firm issued written notification letters to affected consumers offering credit monitoring services.
Law firms have initiated investigations regarding the incident. As regulatory disclosures proceed, additional facts concerning the unauthorized access and full scope of compromised records may continue to develop.