UnknownProfessional ServicesProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDMediumContained

H&N Tax, Inc

bd_f80f9ab6352f9e98 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 2, 2025

Filed

Feb 20, 2026

To disclose

11 weeks

Affected

Not disclosed

Linked

4 filings

Confidence

66%

Full breach record for H&N Tax, Inc →

H&N Tax, Inc. d/b/a CSA Tax notified consumers that unauthorized access occurred on December 2, 2025, affecting names and Social Security numbers. The company engaged forensic specialists, secured the environment, and implemented additional technical safeguards. Complimentary credit monitoring is offered.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday11 weeks discovery → filing

Incident timeline

discovery → filing · 11 weeks / 80 days

Dec 2, 2025

Begins

Dec 2, 2025

Discovered

Feb 20, 2026

Filed

vs. sector median

7 wks faster

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Maine State AGbd_3d4f05ec1dffaa1b2026-02-20Candidate
New Hampshire State AGbd_efcdb3c974c3d5682026-02-20Verified
Massachusetts State AGbd_6cb4887bd2bd38a02026-02-21 · +1dVerified

Name: H&N Tax, Inc
norm: h n tax

Name: H&N Tax, Inc
norm: h n tax
Also named: H&N Tax, Inc.dba oflegal entity
CSA Taxdba oftrade name
Industry: Professional Servicesllm

Discovered: Dec 2, 2025
Breach occurred: Dec 2, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Feb 20, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Unknown

During the incident: Immediately took action to address and investigate the event
Engaged third-party computer forensic specialists to assist with determining the nature and scope of the event
Took steps to secure the environment
Undertook a thorough investigation
Implemented additional technical safeguards to further enhance the security of information in our possession and to prevent similar events from happening in the future
Offering complimentary credit monitoring and identity protection services
Changes made: Implemented additional technical safeguards to further enhance the security of information in our possession and to prevent similar events from happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 11 weeks(80 days from discovery to filing)
Compliance flags: VT AG >45 bday
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGFeb 20 · first

New Hampshire State AGFeb 20 · first

Vermont State AGFeb 20 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2026-02-20-hn-tax-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 20, 2026
Raw hash: feecec069c64837bc28865f086623b99aeac5a5ab029ae9806fa06d12a5ee1e2

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityH&N Tax, Inc

Victim entityH&N Tax, Inc

Incidentdiscovered Dec 2, 2025

Stated responseImmediately took action to address and investigate the event

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov