TaxBit notified consumers of a data security incident involving a third-party web application. Unauthorized access may have occurred in late September 2023, potentially exposing names, email addresses, and read-only API keys. TaxBit engaged outside experts, notified impacted users on September 23, 2023, and recommended deleting and recreating API keys. No specific count of affected individuals was provided in the filing.