Data breach investigation
Baker Tilly Data Breach Investigation
Clients, dependents, and families · Third-party platform incident
Hall Attorneys is investigating Baker Tilly Advisory Group, LP’s disclosed data breach involving a third-party platform. We want to hear from clients, dependents, parents or guardians, people notified through a client organization, and authorized business representatives with related privacy concerns, suspected misuse, or response costs. We are reviewing safeguards, vendor oversight, notice practices, and potential legal claims, including whether a class action is warranted. Individual exposure and legal responsibility remain under review.
What has Baker Tilly disclosed?
Baker Tilly’s notice says an unauthorized actor obtained certain client-related data held on a third-party provider’s platform. It identifies September 6, 2026 as awareness of the potential incident and October 28 as completion of the affected-data review. The sample letters are dated November 9.
California’s filing separately lists September 2, 2026 as a breach date. A listed breach date, discovery date, review completion, and notice date describe different stages; they do not establish the full access period or when any particular person’s information was obtained.
BleepingComputer reported the client notifications on November 11. The public materials reviewed do not identify the provider, the method of entry, or a confirmed ransomware group. We are not attributing this incident to a particular vendor or threat actor.
Whose information and what data may be involved?
The public company samples include adult and parent/guardian notices. Their individual data-category field is a placeholder; check your own letter for the information identified in your case. We do not assume that every recipient’s records contain the same fields.
BleepingComputer attributes 10,456 affected Texas residents to the Texas Attorney General’s filing, with names, addresses, Social Security numbers, and other information listed. This is a reported Texas count, not a nationwide total or a finding that every notified person had all those fields exposed.
South Carolina’s official register separately lists 1,359 residents and a November 9 reporting date. State counts should not be added together as a verified national total. We have not independently established the complete affected population or each person’s exposure.
A relationship with Baker Tilly or a client organization alone does not establish involvement. The reviewed materials do not establish that every client file, tax return, bank record, or dependent’s information was affected.
What does the company say about its response?
Baker Tilly describes containment, outside investigators, and law-enforcement cooperation. It reports no evidence of continued unauthorized access to its network or systems since identification and no known linked identity theft or fraud. Those statements do not establish that its systems were never accessed or that later misuse is impossible.
The notice offers 24 months of Experian credit and identity monitoring. Use your verified individual notice for eligibility, enrollment instructions, and deadlines. A monitoring offer is not a finding of legal liability or a promise of compensation.
Who should contact Hall Attorneys?
We invite individuals and authorized representatives with a related notice or incident concern, including people who:
- Received a Baker Tilly notification for themselves or a dependent.
- Are a parent or legal guardian responding to a notice concerning a child.
- Learned through an employer, business, or other client organization that their information may be involved, even without a direct Baker Tilly client relationship.
- Observed unfamiliar accounts, identity-theft attempts, suspicious messages using private details, or other activity they believe may be connected.
- Spent time or money responding to the incident, or represent a business with related privacy concerns or response costs.
You do not need a notice or known financial loss to contact us. For a child or another person, describe your relationship without providing their name, date of birth, Social Security number, or documents in an initial inquiry.
We review exposure, the connection to any suspected misuse or expenses, and possible legal claims individually. Contacting the firm does not establish class membership or an entitlement to compensation.
What is Hall Attorneys reviewing?
Our investigation concerns how personal information was protected and retained, oversight of the third-party platform, the timing and content of notices, and the consequences for affected people or client organizations. These are questions under review, not findings that a particular safeguard or legal duty was violated.
Describe incident-related expenses separately from ordinary accounting, advisory, or tax-service fees. Preserve any credits, refunds, insurance payments, or reimbursements. We do not assume ordinary fees are recoverable losses caused by this incident.
What can recipients do now?
Verify a message through a known company contact or the details in your original notice before using enrollment links. Baker Tilly’s notice lists incident assistance at 833-918-3966, weekdays 8 a.m. to 8 p.m. Central, excluding major U.S. holidays. Do not send monitoring activation codes or engagement numbers to Hall Attorneys.
The Federal Trade Commission explains credit freezes, fraud alerts, credit-report review, and procedures for a child’s credit file. Its guidance can help you consider protective steps through official channels. Do not delay account protection or an urgent fraud report while awaiting a legal review.
Requesting a case review does not enroll you in monitoring, place a credit freeze, report identity theft, or submit a support request to Baker Tilly. Use the appropriate official channel for those actions.
What records should you preserve?
Keep your original notice and envelope, relevant emails, suspicious messages, support correspondence, and records of response time, expenses, and any suspected misuse. Note when you received the notice and how your information was provided to Baker Tilly or a client organization. Keep only records you are authorized to access.
Do not send Social Security numbers, tax returns, tax identifiers, bank or payment-card details, passwords, identity documents, monitoring codes, children’s records, or confidential client files in an initial inquiry. Describe the records first; we can discuss what is needed and an appropriate way to provide it. Do not seek or share allegedly stolen data.
Contact Hall Attorneys about Baker Tilly
Provide your name, state or country of residence, a safe way to reach you, and your relationship to Baker Tilly or the client organization. Tell us whether the inquiry concerns you, a dependent, or a business, and whether and when you received a notice. For a business, identify your role without providing confidential records.
Briefly describe your concern, any suspected misuse, and related time or expenses. You may contact us before proving every loss or determining all affected data fields. Let us know whether it is safe to leave a voicemail.
Nicholas Hall
Email: nhall@hallattorneys.com
Request a Case ReviewAttorney Advertising. Responsible attorney: Nicholas Hall, Hall Attorneys, P.C., Edna, Texas. Hall Attorneys is not affiliated with Baker Tilly, its clients, the third-party provider, or Experian. This page describes an investigation, not a filed lawsuit by Hall Attorneys concerning this incident. Individual exposure, legal responsibility, and compensation have not been determined. It provides general information, not legal advice. Contacting the firm or submitting information does not create an attorney-client relationship. No outcome is guaranteed.