BleepingComputer reported on 11 November 2026 (07:01 AWST 12 Nov) that the Baker Tilly Advisory Group, a US accounting and advisory firm, is notifying clients that personal information about them and their dependents was compromised.

According to the notification quoted by BleepingComputer, Baker Tilly became aware on 6 September 2026 of a potential cybersecurity incident involving information stored on a platform operated by a third-party service provider it uses to serve clients, and 'the unauthorized actor was able to obtain data relating to certain Baker Tilly clients'.

BleepingComputer says Baker Tilly completed its review on 28 October, when it identified whose information was involved.

The notice does not give a client count, does not name the provider, and leaves the data types as a placeholder. BleepingComputer reports that the Office of the Texas Attorney General lists 10,456 affected individuals in Texas, with Social Security numbers, full names and addresses among the exposed data.

Baker Tilly says it contained the incident, engaged external experts, notified law enforcement, has no evidence of unauthorised activity on its own network and no reports of identity theft or fraud, and is offering affected people 24 months of Experian credit and identity monitoring. (source: BleepingComputer, quoting Baker Tilly's notice and the Texas AG portal)