CYBERSECURITYTRACKER
TRACKING
Permanent story citation

More than 2 million user records from TaxAct allegedly acquired; 450k already leaked

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4539

As cited

Copy frozen at (site build).

breaches incidents

More than 2 million user records from TaxAct allegedly acquired; 450k already leaked

An anonymous source reported acquiring over 2 million records from TaxAct (owned by Cinven) containing client phone numbers, usernames, and email addresses on August 13. Approximately 450,000 of these records have already been leaked publicly, though some phone numbers in the dataset are not valid.

Why it matters: TaxAct users face credential exposure and potential phishing or identity theft targeting tax records; practitioners should advise clients to monitor accounts, change passwords, and watch for fraud activity.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary