Baker Tilly Clients Exposed in Third-Party Vendor Breach

Baker Tilly learned of a data breach on September 6 affecting client information stored at a third-party service provider. The company’s official notification did not identify the vendor, disclose the number of affected clients, or fully specify the compromised data. However, Texas attorney general records document that the breach reached at least 10,456 state residents, exposing Social Security numbers, full names, addresses, and other personal details. The investigation concluded October 28.

Baker Tilly reports no unauthorized access to its own systems and no confirmed cases of fraud or identity theft from the incident. The firm engaged external investigators and notified law enforcement. It is offering affected individuals 24 months of credit monitoring and identity protection services through Experian. No ransomware groups have claimed responsibility for the attack.