Skip to content
Accounting Firms Overconfident in Cybersecurity Measures, Survey Reveals

Accounting Firms Overconfident in Cybersecurity Measures, Survey Reveals

First seen 30 Oct 2026, 17:45 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 30, 2026 at 19:16 UTC
  • •Only 44% of accounting firms can remotely wipe lost devices.
  • •43% of firms with security layers lack EDR on all devices.
  • •Phishing attacks have become more sophisticated, exploiting generative AI.

A recent survey by Rightworks of over 500 accounting firms indicates a significant gap between confidence in cybersecurity measures and actual protections in place. Confidence levels range from 73% among the least modern firms to 92% among the most advanced. However, only 44% of firms can remotely wipe lost or stolen devices, and just 43% have endpoint detection and response (EDR) on all devices. The survey also highlights that human error remains a vulnerability, with only 58% of firms conducting phishing simulations despite training. Anjan Bagchee, CISO at Rightworks, noted that phishing attacks have become more sophisticated, leveraging generative AI to create convincing messages. The findings suggest that many firms may be unaware of the true extent of their vulnerabilities, raising concerns about their preparedness for the upcoming tax season.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-28
Rightworks survey published
Survey reveals gaps in cybersecurity protections among accounting firms, with high confidence but low actual security measures.
Finance.Yahoo
2026-10-30
Cpapracticeadvisor article published
Highlights three cybersecurity priorities for accounting firms ahead of tax season, emphasizing the need for EDR, remote wipe capabilities, and phishing simulations.
Cpapracticeadvisor

More articles in this cluster (3)

Following this threat?

Track Apex Financial Solutions Of Utah in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3

Common questions

What percentage of firms can remotely wipe devices?
Only 44% of accounting firms reported they can remotely wipe lost or stolen devices.
How many firms have EDR on all devices?
Just 43% of firms that use layered security have endpoint detection and response (EDR) on every device.
What are the key cybersecurity priorities before tax season?
Firms should implement EDR on all devices, ensure remote wipe capabilities, and conduct phishing simulations.