Intuit Inc. notified the New Hampshire Attorney General on September 15, 2016, regarding unauthorized access to two New Hampshire customers' TurboTax accounts. The breach involved the use of legitimate login credentials stolen from non-Intuit sources (credential stuffing/reuse). Affected data included names, SSNs, addresses, DOB, driver's license numbers, and financial information. Intuit contained the incident by temporarily disabling accounts, notified law enforcement and the IRS, and provided one year of free credit monitoring.
Affected (this filing): 2