Douglas M Smith & Co, CPAs discovered on February 23, 2026, that an unauthorized user accessed their third-party tax filing software to file fraudulent tax returns. The breach occurred on January 20, 2026. Affected data includes Social Security numbers, government IDs, names, and bank account information. The firm notified law enforcement (FBI, Secret Service, IRS, FTC) and is offering 12 months of credit monitoring. No mass data exfiltration was indicated.