TaxAct (operated by Blucora, Inc.) experienced unauthorized account access between November 10 and December 4, 2015, in which an external third party used stolen credential combinations sourced outside TaxAct's systems to access user accounts. Affected accounts may have had tax returns opened or printed, potentially exposing names, SSNs, addresses, driver's license numbers, and bank account information. Accounts were disabled and credit monitoring was offered.