Langwasser & Company CPAs, an accounting firm in Upland, California, disclosed that client Social Security numbers and financial information were exposed in a data security incident. The firm notified affected individuals and the California Attorney General in August 2026. If you received a notice, place a fraud alert or credit freeze immediately and monitor your credit reports closely.
| Company | Langwasser & Company CPAs |
|---|---|
| Industry | Finance |
| Data Types Exposed | Full Names, Social Security Numbers, Financial Account Information, Tax-Related Records |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | California Attorney General |
What Happened in the Langwasser & Company CPAs Data Breach?
Langwasser & Company CPAs, an accounting firm based in Upland, California, recently disclosed a data security incident involving sensitive client information. The firm reported the breach to the California Attorney General in August 2026. As a result, affected individuals are now receiving formal written notice about what took place.
According to the notification, unauthorized access to certain files occurred at some point before the firm discovered the problem. The exact discovery date has not been publicly disclosed. However, the firm has confirmed that personal information was involved, prompting a full review of its systems and records.
Once the firm identified the issue, it began an internal investigation to determine the scope of the exposure. This process likely included reviewing which files were accessed and confirming which individuals were affected. The firm has not released additional technical details about the attack method, so it remains unclear whether the incident involved ransomware, hacking, or another form of unauthorized access.
Because accounting firms routinely store tax records, financial statements, and identification documents, any breach involving this sector carries heightened risk. This Langwasser & Company CPAs data breach appears to follow that pattern, given the nature of the data mentioned in the notification letter.
Who was affected?
The notification suggests that the breach affected individuals whose personal and financial information was stored in the firm’s systems. This likely includes current and former clients who relied on Langwasser & Company CPAs for accounting, tax preparation, or related financial services.
The exact number of affected individuals has not been publicly disclosed. In addition, the firm has not specified whether employees, in addition to clients, were included in the exposure. Because the firm notified residents in multiple states, including Iowa, Maryland, Massachusetts, New York, North Carolina, and Oregon, the impact appears to extend beyond California alone.
Given that accounting clients often include individuals filing personal tax returns, it’s possible that the affected population includes people of varying ages. There is no indication in the notification that minors were specifically impacted. Still, anyone who worked with this firm should treat the notice seriously, regardless of when they were a client.
What Information Was Potentially Exposed?
The notification letter references credit monitoring services and security freeze guidance typically provided when Social Security numbers and financial data are involved. This strongly indicates that highly sensitive personal information was part of the exposure.
- Full names
- Social Security numbers
- Financial account information
- Tax-related records commonly held by accounting firms
Because the firm recommended credit monitoring and fraud alert services, it’s reasonable to conclude that this data type was confirmed as exposed. This is a hallmark of accounting industry breaches, where tax preparation files often include highly sensitive identifiers.
When Social Security numbers are exposed, the risk of identity theft rises sharply. Criminals can use this information to open new credit accounts, file fraudulent tax returns, or apply for loans under a victim’s name. As a result, affected individuals may face financial and administrative headaches for months or even years.
Financial account details carry their own risks as well. If bank account or routing numbers were included, unauthorized withdrawals or fraudulent transfers become a real concern. In addition, combined data sets like this make it easier for scammers to craft convincing phishing attempts, because they can reference real personal details to appear legitimate.
What is the company doing?
In response to the incident, Langwasser & Company CPAs stated that it has implemented additional safeguards to protect client information going forward. The firm also indicated that it continually evaluates its security measures to prevent future incidents.
The firm sent written notification letters to affected individuals explaining the situation and outlining recommended protective steps. This included guidance on credit monitoring, fraud alerts, and security freezes through the three major credit bureaus. Langwasser & Company CPAs also filed formal notification with the California Attorney General, which is a standard step required when California residents are affected.
Because the notification includes contact information for a dedicated phone line, affected individuals can reach out with questions during specified business hours. This suggests the firm has set up a process to handle inquiries related to the breach. Ongoing monitoring of its systems appears to be part of the firm’s continued response.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Anyone who received a notification letter should start checking their credit reports right away. Under federal law, you can request a free credit report every 12 months from each of the three major credit bureaus through annualcreditreport.com.
Because fraudulent activity can appear months after a breach, it’s important to review these reports periodically, not just once. Look for accounts you didn’t open or inquiries you don’t recognize. If you spot anything suspicious, contact the credit bureau immediately to dispute it.
Consider a Fraud Alert or Security Freeze
Given that Social Security numbers may have been exposed, placing a fraud alert or credit freeze is a strong protective step. A fraud alert requires creditors to verify your identity before opening new accounts in your name. A security freeze goes further by blocking access to your credit file entirely, unless you lift it.
To place a freeze, you’ll need to contact Equifax, Experian, and TransUnion separately. Each bureau will ask for your name, address, date of birth, and Social Security number to verify your identity. Afterward, you’ll receive a PIN or password, so keep this in a safe place since you’ll need it to lift the freeze later.
Watch for Phishing and Scam Attempts
Because attackers often use stolen data to craft convincing scams, affected individuals should be cautious of unexpected emails, texts, or phone calls. Scammers may pose as the accounting firm, a bank, or even a government agency to extract more information.
Never click on links or provide personal details in response to unsolicited messages. Instead, verify any communication by contacting the organization directly through a known, trusted phone number. This simple habit can prevent a lot of follow-up fraud.
Report Suspicious Activity Promptly
If you notice signs of identity theft, such as unfamiliar accounts or unauthorized charges, act quickly. File a police report with your local law enforcement agency, since many creditors require this documentation to resolve fraudulent debts.
You should also file a complaint with the Federal Trade Commission through its Identity Theft website or by phone. This creates an official record that can assist law enforcement investigations. Because tax fraud is also a possibility given the accounting context, watch for any unexpected IRS notices about returns you didn’t file.
Consult a Data Breach Attorney
If you’re unsure about your rights or next steps after this breach, speaking with a data breach attorney can help clarify your options. Many offer free consultations to review your specific situation and determine whether you may qualify for compensation.
Because laws vary by state, an attorney familiar with data breach cases can explain what protections apply to you. This is especially useful if you experience financial losses or identity theft linked to this incident. Taking this step early can help preserve your options moving forward.
More Information
Official data breach notification from California Attorney General