About Legacy CPA
Legacy CPA, a financial services organization, experienced a data breach affecting a total of 2,560 individuals, including two residents of Maine. The breach was discovered on March 25, 2025, and involved an external hacking incident that compromised personal information related to clients’ tax return preparation files. The unauthorized access was identified and investigated with the help of third-party experts, and measures have been taken to prevent future incidents.
What Happened
On March 25, 2025, we determined that between February 5, 2025 and March 20, 2025, a third party obtained unauthorized access to information primarily associated with certain clients’ tax return preparation files. As soon as we became aware of this activity, we began an investigation and engaged third-party experts to assist us in determining the nature and scope of the incident. As part of the investigation, we conducted an additional detailed review and analysis of relevant files and determined that your information may be in scope. This review was completed on May 19, 2025.
The breach affected clients’ tax return preparation files, and unauthorized access was confirmed between February 5, 2025, and March 20, 2025. A total of 2,560 individuals were affected by this breach.
Next Steps
Affected users are advised to obtain an Identity Protection PIN (IP PIN) from the IRS to prevent unauthorized tax filings. Enrolling in the provided identity protection services is recommended to safeguard their personal information. Users should also remain vigilant for any signs of identity theft by reviewing account statements and credit reports regularly. Legacy CPA has provided additional guidance and resources to help users protect their information.
Identity Theft Protection Services
Impacted individuals are offered 24 months of IDX identity protection services, which include credit and CyberScan monitoring. The services also feature a $1,000,000 insurance reimbursement policy and fully managed identity theft recovery services. To enroll, users are encouraged to contact IDX or visit their website using the unique enrollment code provided in the notification letter. These services are designed to assist in resolving any issues should an individual’s identity be compromised.