Intuit Inc. notified the New Hampshire Attorney General on April 13, 2016, regarding unauthorized access to five New Hampshire TurboTax customers' accounts between March 15 and March 18, 2016. Unknown actors used legitimate credentials obtained from external sources (phishing or other breaches) to access in-process or prior year tax returns containing PII, SSNs, and financial data. Intuit contained the accounts, notified law enforcement and the IRS, and offered one year of free credit monitoring.
Affected (this filing): 5