Hallisey & D’Agostino, LLP, a tax and accounting firm, experienced an external system breach (hacking) that occurred on September 28, 2025. The company discovered the breach on October 21, 2025, and subsequently disclosed it on April 17, 2026. This information was confirmed by filings with the Maine and Indiana Attorneys General, and a notification letter was issued under Massachusetts law.
Approximately 16,683 individuals were affected by this data breach. The exposed data types include names and addresses. While specific details on SSN, medical, or financial data exposure are not available, the firm offered 12 months of credit monitoring, identity restoration services, and identity protection insurance through IDX. The breach affected residents in at least 10 states, including Maine (74 residents), Indiana (10 residents), Massachusetts, and Connecticut.
As of the current information, there are no identified class-action lawsuits, and the company is not publicly traded. Details regarding the attack vector remain unknown. More information may emerge as investigations continue, and affected individuals may receive delayed notifications from the company.