Hayden, Narey & Persich, a tax preparation firm in San Clemente, CA, experienced unauthorized access to its systems via a Remote Desktop application on July 3–4, 2017. A malicious actor accessed client tax records potentially including names, SSNs, W-2/1099 data, and bank account details. A law enforcement hold delayed notification until November 28, 2017. A forensic IT firm was engaged; affected individuals were offered Equifax credit monitoring.