Harvey & Martin, PLLC, an accounting and tax preparation firm, reported a data incident in June 2026. Notice letters were dated June 11, 2026, and the breach was reported to the Massachusetts Attorney General on June 23, 2026. The firm confirmed that the exposure included names, Social Security numbers, and bank account numbers. To address the incident, Harvey & Martin offered 24 months of single-bureau credit monitoring via Cyberscout to affected individuals.
This incident affected 111 individuals in Massachusetts, exposing their names, Social Security numbers, and bank account numbers where present on tax returns. These types of exposed data carry an elevated risk for fraudulent tax returns and financial fraud. The company is not publicly traded, and its revenue is not publicly disclosed. It is not considered a vendor breach, as it was a direct breach of the primary firm.
Details surrounding the full scope of the incident may emerge as investigations proceed, and notices to affected individuals may be delayed.