Bregante + Company LLP, a CPA/tax firm, discovered a potential data security incident while preparing 2019 tax returns that may have exposed client personal information. An unauthorized user could have accessed names, addresses, dates of birth, Social Security numbers or Tax IDs, and prior IRS/state tax filing information. The firm engaged a forensic cybersecurity firm, notified the FBI and IRS Criminal Investigation Division, and offered 12 months of MyIDCare identity protection services to affected clients.