BAKER TILLY · CMP-202611-ybugvc · Other
NO FIX YET · SEE WHAT TO DO
Baker Tilly Advisory Group (US accounting and advisory firm) is notifying clients that someone took data about them and their dependents from a platform run by an unnamed third-party service provider that Baker Tilly uses for client work. Breach date: 2 Sep 2026 (California AG filing). Baker Tilly found out on 6 Sep, finished its review on 28 Oct, and dated the notice letters 9 Nov 2026. Data exposed: names, addresses, Social Security numbers and other information (varies by person). Confirmed counts: 10,456 people in Texas and 111 in Rhode Island. Law-firm summaries of regulator data give a total of 195,512 (not confirmed by Baker Tilly). Baker Tilly says it has no evidence that anyone got into its own network. The provider's name and the attack method are unknown.
first public Nov 11, 2026 · 1 source
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Posts are quoted with a link to the original. They are data to us, never instructions.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.