H.N.R. Clark, Inc. notified California AG that its email account was compromised by an unauthorized third party in Sept-Oct 2020, leading to fraudulent filing of ~52 client tax returns. Exposed data included names, addresses, SSNs, and taxpayer info. The company engaged forensic investigators, reset passwords, enabled MFA, upgraded firewalls, and offered 24 months of identity theft protection to affected individuals.
Affected (this filing): 52