INTUIT INC.

Intuit, Inc. notified the New Hampshire Attorney General of unauthorized access to a single New Hampshire TurboTax customer's account. The incident was discovered on April 9, 2025, following a security review. The unauthorized access occurred between January 21, 2025, and April 8, 2025, using legitimate credentials obtained from non-Intuit sources. Intuit secured the account, notified the IRS, and sent a notice to the affected resident offering free identity protection and credit monitoring services.

Intuit Inc. reported a data breach affecting 3 individuals, including 3 Maine residents. The incident occurred on January 21, 2025, was discovered on April 9, 2025, and notification was sent on May 9, 2025. The breach involved unauthorized access to personal identifiers, likely via compromised credentials. Intuit offered 12 months of Experian IdentityWorks protection to affected individuals.

Intuit Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-05-09. 2 Massachusetts residents were affected.

Intuit Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-17 and was reported on 2025-05-09. 16 Indiana residents were affected.

Intuit Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-04-28. 3 Massachusetts residents were affected.

Intuit Inc. notified the Maryland Attorney General that unauthorized access to four Maryland TurboTax customer accounts was discovered on February 4, 2025. The access occurred between November 16, 2024, and February 4, 2025, using legitimate credentials obtained from non-Intuit sources. Affected data included names, SSNs, addresses, DOBs, driver's license numbers, and financial information. Intuit secured accounts, notified the IRS, and offered one year of credit monitoring.

Intuit Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-03-13. 4 Massachusetts residents were affected.

Intuit Inc. reported a single Maine resident's TurboTax account was accessed using stolen credentials (username/password) believed to be from a non-Intuit source. The breach occurred on 02/26/2024 and was discovered on 02/04/2025. Affected data included name, SSN, address, DOB, driver's license, and financial info. Intuit secured the account and offered 12 months of Experian IdentityWorks.

Intuit Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2025-02-13. 1 Massachusetts residents were affected.

Intuit Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-01-12 and was reported on 2025-02-12. 1 Indiana residents were affected.

Intuit Inc. reported a cybersecurity incident affecting 1 Maine resident. Unauthorized access occurred between March 5 and March 18, 2024, discovered on November 21, 2024. The attacker used stolen credentials to access a TurboTax account, exposing PII including SSN, DOB, and financial data. Intuit secured the account and offered 12 months of Experian IdentityWorks.

Intuit Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-03-05 and was reported on 2024-12-20. 1 Indiana residents were affected.

Intuit Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-12-20. 1 Massachusetts residents were affected.

Intuit Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-11-27. 1 Massachusetts residents were affected.

Intuit Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-18 and was reported on 2024-11-27. 5 Indiana residents were affected.

Intuit Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-29 and was reported on 2024-11-08. 2 Indiana residents were affected.

Intuit Inc. notified the New Hampshire Attorney General of unauthorized access to a single NH customer's TurboTax account. Access occurred between Jan 29 and Feb 20, 2024, using credentials obtained from a non-Intuit source. Intuit discovered the issue on Oct 23, 2024, secured the account, and notified the IRS. The customer was offered one year of free identity protection and credit monitoring.

Intuit Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-11-08. 3 Massachusetts residents were affected.

Intuit Inc. notified the New Hampshire Attorney General of unauthorized access to two NH TurboTax customer accounts. Access occurred Jan 23–Feb 4, 2024, using credentials obtained from non-Intuit sources. Intuit discovered the issue on Sep 20, 2024, secured accounts, notified the IRS, and offered 1 year of credit monitoring to affected residents.

Intuit Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-23 and was reported on 2024-10-18. 2 Indiana residents were affected.

Intuit Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-09-24. 1 Massachusetts residents were affected.

Intuit Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-12-28 and was reported on 2024-09-20. 1 Indiana residents were affected.

Intuit Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-07-02 and was reported on 2024-09-05. 1 Indiana residents were affected.

Intuit, Inc. notified New Hampshire residents that an unauthorized party accessed their TurboTax accounts using stolen credentials obtained from a non-Intuit source. Intuit secured the accounts and offered Experian IdentityWorks services to affected individuals.

Intuit Inc. reported a data breach affecting 2 Maine residents. Unauthorized access occurred on January 11, 2024, via stolen credentials. Discovered July 10, 2024. Affected data included names, SSNs, DOBs, driver's licenses, and financial info. Notices sent August 9, 2024. Experian IdentityWorks offered.