HackingProfessional ServicesProfessional ServicesStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

Douglas M Smith & Co, CPAs

bd_3262bcf5a826e53f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 23, 2026

Filed

Apr 15, 2026

To disclose

7 weeks

Affected

Not disclosed

Confidence

66%

Full breach record for Douglas M Smith & Co, CPAs →2 incidents on file

Douglas M Smith & Co, CPAs discovered on February 23, 2026, that an unauthorized user accessed their third-party tax filing software to file fraudulent tax returns. The breach occurred on January 20, 2026. Affected data includes Social Security numbers, government IDs, names, and bank account information. The firm notified law enforcement (FBI, Secret Service, IRS, FTC) and is offering 12 months of credit monitoring. No mass data exfiltration was indicated.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 34 days

discovery → filing · 7 weeks / 51 days

Jan 20, 2026

Begins

Feb 23, 2026

Discovered

Apr 15, 2026

Filed

vs. sector median

11 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Douglas M Smith & Co, CPAs
norm: douglas m smith co cpas

Name: Douglas M Smith & Co, CPAs
norm: douglas m smith co cpas
Industry: Professional Servicesllm

Discovered: Feb 23, 2026
Breach occurred: Jan 20, 2026
Undetected for: 34 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Government IDIdentity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified the FTC, FBI, IRS, and Secret Service
Third party: via Third-party tax filing software
Initial access: supply_chain

During the incident: Began an investigation with the assistance of IT specialists
Notified the FTC, FBI, IRS, and Secret Service
Changed our EFIN
Constantly changing our passwords
Offering 12 months of complimentary credit monitoring services
Changes made: Implemented additional security measures to further protect our network
Changed our EFIN
Constantly changing our passwords
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(51 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-621806
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2026
Raw hash: 46a969c10b643f0f8d072ed552b168d78c386edadf59fca51b660440b94b4221

Reporting entityDouglas M Smith & Co, CPAs

Victim entityDouglas M Smith & Co, CPAs

Incidentdiscovered Feb 23, 2026

Stated responseBegan an investigation with the assistance of IT specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov