Creal & Creal, An Accountancy Corporation experienced a data breach involving malware that gained access to a server on September 10, 2020. The incident was discovered on October 8, 2020, when IRS e-file rejections were received. Compromised data included names, addresses, SSNs, bank account information, dates of birth, and driver's license numbers. The firm engaged forensic investigators, deleted the malware, implemented ESET anti-virus, and offered 24 months of identity monitoring.