Sprague & Jackson
ent_4cc1235dc70ece64
Disclosures
7
State AG · Leak Site · 7 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
3,308
nationwide · State AG IN
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Sprague & Jackson
- Normalized
- sprague jackson— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- sprjac.com
Disclosure history (7)newest first
- Massachusetts State AGas victim2026-06-02
Sprague & Jackson notified Massachusetts residents of a security incident impacting name, address, employment info, DOB, and SSN/ITIN. The company implemented security measures and offers 24 months of free credit monitoring and fraud assistance via Cyberscout/TransUnion. No evidence of misuse was found.
- New Hampshire State AGas victim2026-06-01
Sprague & Jackson, a tax and payroll processing company, notified the New Hampshire Attorney General of a data security incident discovered on September 22, 2025. The breach potentially exposed the personal information of one New Hampshire resident, including name, address, and SSN/ITIN. Sprague & Jackson engaged forensic specialists, secured systems, and offered 12 months of credit monitoring through TransUnion/Cyberscout.
- Indiana State AGas victim2026-05-26
Sprague and Jackson reported a data breach to the Indiana Attorney General. The breach occurred on 2025-09-22 and was reported on 2026-05-26. 3 Indiana residents were affected. 3,308 individuals affected in total.
- Maine State AGas victim2026-05-26
Sprague and Jackson, a financial services firm, reported an external system breach (hacking) on September 22, 2025. The incident affected 6 Maine residents. Notification was sent electronically on May 26, 2026, offering 12 months of credit monitoring and identity protection via TransUnion.
- Nebraska State AGas victim2026-05-26
Sprague & Jackson, a tax and payroll processor, notified the Nebraska AG of a data security incident discovered on September 22, 2025. Unauthorized activity on its network potentially exposed the names, addresses, and SSNs/ITINs of 2 Nebraska residents. Notices were sent on May 21, 2026, offering 12 months of credit monitoring via TransUnion/Cyberscout. The company engaged forensic specialists and implemented enhanced security controls.
- Vermont State AGas victim2026-05-26
Sprague and Jackson reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-05-26. The reporting organization type is Financial Services. 5 Vermont residents were affected. Categories of data breached: Social Security Numbers, Government ID Numbers.
- GLOBALLeak Siteas victim2025-10-15
Sprague & Jackson, USA - Sprague & Jackson is a tax services firm that offers a range of client services including secure document submission and payment options. They provide personalized assistance through scheduled meetings to help clients ...