Did Smith & James, CPAs have a data breach?

Answer

Yes. Smith & James, CPAs reported a data breach to the California Attorney General on May 28, 2026.

What the filing says

Reported to: California Attorney General
Filing date: May 28, 2026
Breach date: March 5, 2026
People affected: Not stated in the filing

Information involved

Full Name
Social Security Number
Date of Birth
Tax Return Information
Wage and Compensation Information
Financial Account Number
Routing Number
Home Address

In plain terms

Smith & James, CPAs reported a data breach to California regulators on May 28, 2026, impacting sensitive client information. The incident exposed personal and financial records, requiring affected individuals to monitor for potential misuse.

Smith & James, CPAs, a California-based accounting and financial advisory firm, officially reported a data breach to state regulators on May 28, 2026. This incident, which occurred on March 5, 2026, involved unauthorized access to the firm's systems, compromising client data. The specific nature of the breach was not detailed in the public filing.

The compromised information included various sensitive personal and financial details. According to the filing, data potentially exposed to unauthorized parties included Full Name, Social Security Number, Date of Birth, Tax Return Information, Wage and Compensation Information, Financial Account Number, Routing Number, and Home Address. This broad scope of information could pose significant risks to those affected.

As a firm specializing in tax preparation, auditing, and wealth management, Smith & James, CPAs routinely collects and stores extensive personal and financial documentation. This makes such organizations critical repositories of highly sensitive data, and potential targets for cyberattacks. The firm stated its investigation into the incident is ongoing.

Those impacted by this breach should remain vigilant against potential fraud and identity theft. It is recommended to carefully review all financial account statements and credit reports for any unauthorized activity. Consider placing a fraud alert or security freeze on your credit with the three major credit bureaus. Changing passwords for online accounts, especially financial ones, is also a wise precaution.

Other filings by Smith & James, CPAs

Companies often file the same breach in several states. Each filing is listed separately.

Commonly recommended next steps

Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.

Look up another company

Other breaches reported in California

DataBreachSearch.com reports what was filed with state regulators. It is not legal advice, is not a law firm, and is not affiliated with any government agency or with Smith & James, CPAs.