TaxSlayer
bd_40ae479f097ab3a4 · schema v1 · pii pii-v1
All records for TaxSlayer →Account takeover notice
TaxSlayer notified customers of unauthorized access to their accounts. The filing says: “As a result of ongoing security reviews, TaxSlayer identified on January 13, 2016 that an unauthorized third party, whom we believe obtained your username and password from another online service, may have accessed your TaxSlayer account between 10/10/2015 and 12/21/2015.”
TaxSlayer notified Montana residents of unauthorized access to accounts between Oct 10 and Dec 21, 2015, discovered Jan 13, 2016. Attackers used stolen credentials from other services. Data accessed included names, addresses, and SSNs. TaxSlayer disabled access, required password resets and MFA, and offered credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Oct 10, 2015
Begins
Jan 13, 2016
Discovered
Jan 29, 2016
Filed
vs. sector median
9 wks faster
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- California State AGbd_9f2d4f3a097040a12016-01-29Verified
- Massachusetts State AGbd_b2c2b9a9308ffc582016-02-02 · +4dVerified
Filing propagation · 3 filings · 3 states
View merged incident ↗Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.