Khan and Associates CPA, Inc. notified clients that an unauthorized user accessed their third-party tax filing software, Intuit, starting around July 9, 2025, and filed fraudulent federal and state tax returns. The incident was discovered on July 16, 2025. Affected data included Social Security numbers, government IDs, names, and bank account information. The firm engaged IT specialists, notified law enforcement (FBI, Secret Service, IRS), and implemented MFA and credential resets. Credit monitoring is being provided.