INTUIT INC.

Intuit Inc. (TurboTax) notified Maine AG of an unauthorized account access incident affecting 1 Maine resident. An external party used stolen credentials obtained from a non-Intuit source to log into the victim's TurboTax account on 2024-02-26, potentially accessing tax return data including name, SSN, address, date of birth, driver's license number, and financial information. The breach was discovered 2025-02-04. Intuit locked the account and offered 12-month Experian IdentityWorks monitoring.

Affected (this filing): 1

Intuit Inc. notified the Maryland Attorney General that unauthorized access to four Maryland TurboTax customer accounts was discovered on February 4, 2025. The access occurred between November 16, 2024, and February 4, 2025, using legitimate credentials obtained from non-Intuit sources. Affected data included names, SSNs, addresses, DOBs, driver's license numbers, and financial information. Intuit secured accounts, notified the IRS, and offered one year of credit monitoring.

Affected (this filing): 4