- People affected
- 10,456individuals
- Reported
- 9 November 2026Official notice and 5 more
- Time to tell
- 68 daysfrom 2 September 2026 · the median is 147
- Found to notice
- 64 days (found 6 September 2026, by the company’s letter)
What was exposed 3
- Social Security numbers
- Names
- Addresses
How it happened
- How
- Other
through a data breach at a third-party vendor
sourceOur translation from Ukrainian
через витік даних у стороннього постачальника
- Way in
- third-party vendor
third-party vendor
sourceOur translation from Ukrainian
стороннього постачальника
What changed since it was first reported
- Confirmed breach, 10,456 individuals (BleepingComputer)
What the letter says
- Found
On September 6, 2026, Baker Tilly became aware of a potential cybersecurity incident
- Offered
we are offering you two years of credit and identity monitoring services through Experian at no cost to you
Got a letter or email about this breach? Check it is real →
Read the letter (PDF), as filed with the California Attorney General.
Sources 6
- Official noticeCalifornia Attorney General9 November 2026
- Official noticeTexas Attorney General10 November 2026 · 10,456 Texas residents
- News reportMezhаBaker Tilly informed clients about a data breach at a third-party vendor (our translation from Ukrainian)11 November 2026Confirmed by Baker Tilly:
Baker Tilly informed clients about a data breach
Our translation from Ukrainian
Baker Tilly повідомила клієнтів про витік даних
- News reportBleepingComputerBaker Tilly notifies clients of data breach at third-party provider11 November 2026 · 10,456 individualsArchived copy Wayback Machine, 11 November 2026
Show all 6 sources
- News reportSecurityWeekIn Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach13 November 2026 · 10,456 peopleArchived copy Wayback Machine, 13 November 2026
- News reportit-daily.netBaker Tilly: Data breach at service provider affects customers (our translation from German)14 November 2026
Official notices are read by code from the regulator’s own register. News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. More notices to Texas, California. · Corrections and changes