On January 29, 2026, Neil I. Sidi, C.P.A. experienced an external system breach due to hacking. The company discovered this breach on February 20, 2026, and reported it to the Attorney General of Maine on March 17, 2026. This incident affected 1,950 individuals in total, including 5 Maine residents.
The compromised data types included names and other personal identifiers. The specific types of personal identifiers involved have not been fully disclosed. The company offered identity theft protection services through Transunion (via Cyberscout), including single-bureau credit monitoring/report/score, fraud assistance, and call center services. It remains unclear if other types of sensitive data common for a CPA firm, such as tax records or Social Security numbers, were also exposed.
Additional details about this data breach may emerge as investigations continue. Notices to affected individuals may also be delayed.