Edwards, Faust & Smith, a Certified Public Accounting firm, experienced a data breach that was discovered on April 30, 2026, by its IT provider. The breach was caused by a phishing attack which led to unauthorized activity on the company's network. The firm contained and mitigated the unauthorized activity by May 5, 2026, and began notifying affected individuals on May 28, 2026.
This incident potentially exposed names, Social Security Numbers (SSNs) or taxpayer IDs, dates of birth, addresses, government-issued IDs, medical information, financial account information, financial statements, tax return information, IRS transcripts, and client correspondence. A total of 928 individuals were affected, including 837 residents in Maine. The full extent of compromised data for all individuals has not been publicly detailed.
It is important to note that full details on data breaches can emerge over time, and notification processes may be delayed. For additional information or assistance, individuals were directed to contact the firm directly.