Confirmed

Douglas M. Smith & Co. CPAs: tax software access led to fraudulent tax filings

On February 23, 2026, the firm discovered an unauthorised user had accessed its third-party tax filing software and filed fraudulent self-prepared returns on clients’ behalf; sensitive personal information was likely accessible to the actor.

Last updated: 2026-11-09

Overview

There was no indication of mass data transfer. The CA filing lists January 20, 2026 as the breach date. No total is given.

Timeline

  1. Occurred
  2. Discovered
  3. Disclosed

Organization response

Per the notice, the organisation investigated and contained the incident, notified individuals and offered monitoring or protective resources.

What you can do

Verify notices through official channels, avoid links in unexpected messages, do not provide credentials, and review credit reports and statements.

Sources

  1. Sample consumer notice filed with California AG (DOUGLAS M SMITH & CO CPAS)California Department of Justice, Office of the Attorney General · 2026-11-09
  2. California AG data breach report: DOUGLAS M SMITH & CO CPASCalifornia Department of Justice, Office of the Attorney General · 2026-11-09

Related information

Share a report

No published information yet

Information appears here after source checks or moderation.