Baker Tilly notifies clients of data breach at third-party platform
Clients and their dependents face exposure of names and Social Security numbers, with the firm offering two years of credit monitoring.
Baker Tilly, a large U.S. accounting and advisory firm, is notifying clients that personal data about them and their dependents was exposed in a breach. The data sat on a platform run by a third-party provider that the firm uses for client services. Baker Tilly first learned of the incident on September 6 and finished reviewing the affected records on October 28, when it determined whose information was involved. A Texas Attorney General filing lists 10,456 affected individuals in that state and includes Social Security numbers and names among the exposed fields. The firm says it has seen no sign of intrusion into its own network and no identity theft tied to the exposure, and it is offering 24 months of Experian credit and identity monitoring. The notice did not name the provider or give a total count of affected clients.
Why it matters
The exposure reached clients and their dependents through a platform run by a provider the firm uses, not through Baker Tilly's own network, which the firm says shows no sign of intrusion. Texas filings list 10,456 affected residents of that state, and the notice did not name the provider or give a total count. For those affected, the practical question is whether Social Security numbers and names are now in circulation, and the firm reports no identity theft or fraud tied to the incident so far.
Matters or hype?
Does this story matter, or is it hype? Vote before you see what everyone else said.