Hilderbrand & Clark, CPA experienced unauthorized access to its systems from a foreign IP address on June 14, 2017, discovered on July 10, 2017. The incident potentially exposed sensitive tax return information for clients and employees, including Social Security numbers, financial account details, and employment data. The firm notified the FBI, IRS, and credit bureaus, and offered one year of identity theft protection services.