Baker Tilly data breach exposes client information

Baker Tilly Advisory Group is notifying clients of a data breach that compromised personal information belonging to customers and their dependents, based on information published by Bleeping Computer.

The accounting firm discovered the incident on September 6, 2026, after an unauthorized actor accessed data stored on a platform managed by a third-party service provider. While the company has not disclosed the total number of affected individuals, filings with the Office of the Texas Attorney General indicate that 10,456 people in Texas were impacted. Exposed data types include full names, addresses, and Social Security numbers.

Baker Tilly, a global firm with annual revenue of $6.8 billion, stated that the breach occurred within a third-party environment rather than its own internal network. Upon discovery, the firm engaged external cybersecurity experts and notified law enforcement. Although there are no reports of identity theft or fraud, the company is providing 24 months of credit and identity monitoring services through Experian to those affected.

No ransomware groups have claimed responsibility for the attack, and the firm continues to investigate the scope of the exposure. The incident highlights the ongoing risks associated with third-party service providers in the professional services industry.

Source: Bleeping Computer