Baker Tilly Advisory Group, LP Data Breach Exposes Personal Information

Published: 10 November 2026
Finance data breach illustration
Breach Discovery: Not Publicly DisclosedBreach Notification: 9th November 2026

Baker Tilly Advisory Group, LP filed a data breach notification with the California Attorney General, confirming a security incident affecting personal information. The exact data types and number of people affected have not been publicly disclosed. Affected individuals should monitor their credit reports and watch for phishing attempts as a first step.

CompanyBaker Tilly Advisory Group, LP
IndustryFinance
Data Types ExposedNot Publicly Disclosed
People AffectedNot Publicly Disclosed
Attack MethodUnspecified/Unauthorized Access
Regulators NotifiedCalifornia Attorney General

Were you affected by this breach?

You may be owed compensation.

Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.

Check if you qualify — free review

What Happened in the Baker Tilly Advisory Group Data Breach?

Baker Tilly Advisory Group, LP recently filed a formal data breach notification with the California Attorney General. This filing confirms that the firm experienced a security incident affecting personal information. As a result, California residents received official notice of the event under state law.

At this time, the exact timeline of the incident has not been publicly disclosed. Specifically, the dates for when unauthorized access occurred, when it was discovered, or when the investigation concluded are not available. Because Baker Tilly Advisory Group operates as a major accounting and advisory firm, any breach involving client or employee data carries significant weight for those affected.

In addition, the method used by the attacker has not been detailed in the public filing. This means it remains unclear whether the incident involved ransomware, a phishing attack, unauthorized network access, or another method entirely. However, the fact that a formal notification was filed confirms that some form of data exposure did occur and warranted legal disclosure.

Who was affected?

The population affected by this breach has not been publicly disclosed in detail. However, because Baker Tilly Advisory Group provides accounting, tax, and advisory services, those impacted could include clients, employees, or both. Firms like this often hold sensitive financial and business records for a wide range of individuals and organizations.

The total number of individuals affected has not been publicly disclosed either. As a result, it is not yet clear whether this incident affected a small subset of clients or a much larger group. Additionally, there is no confirmation on whether minors or especially vulnerable individuals were included among those notified.

Because the notification was filed with the California Attorney General, at least some affected individuals reside in California. That said, given the firm’s broader client base across the country, the true geographic scope of this breach may extend well beyond state lines.

What Information Was Potentially Exposed?

The specific types of information involved in this breach have not been publicly disclosed. The California filing confirms that a notification occurred, but it does not list the exact data categories compromised. As a result, this article cannot confirm whether financial records, Social Security numbers, or other personal details were part of this incident.

Even without confirmed details, it helps to understand the general risks tied to breaches at financial and advisory firms. For example, these organizations often manage tax documents, banking details, and identifying information for their clients. If any such data were involved, affected individuals could face a heightened risk of identity theft or financial fraud.

Furthermore, when personal information is exposed in any form, scammers may use it to craft convincing phishing emails or fraudulent calls. This is especially true when attackers already have a person’s name or contact details. Therefore, affected individuals should stay alert even though the precise data categories remain unknown.

What is the company doing?

Baker Tilly Advisory Group filed a formal notification with the California Attorney General regarding this incident. This filing represents an official acknowledgment that a breach occurred and that affected individuals needed to be informed under state law. Beyond this filing, however, additional details about the firm’s internal response have not been publicly disclosed.

It is not yet clear what remediation steps, if any, the firm has taken since discovering the issue. Similarly, there is no public confirmation of whether credit monitoring or identity protection services were offered to those affected. As more information becomes available, this article will reflect any updates regarding the company’s broader response.

What Should Affected Individuals Do?

Monitor Your Credit Reports Closely

Affected individuals should regularly check their credit reports for unfamiliar accounts or inquiries. You can request free reports from each of the three major credit bureaus through AnnualCreditReport.com. Reviewing these reports often helps catch fraudulent activity early, before it causes lasting damage.

Because the exact data exposed in this breach is unknown, this step is especially important. Early detection gives you more time to dispute fraudulent charges or accounts. As a result, consistent monitoring over the coming months is a smart precaution.

Watch for Phishing Attempts

After any data breach, scammers often follow up with phishing emails or text messages. These messages may pretend to be from Baker Tilly Advisory Group or another trusted source. Therefore, you should avoid clicking links or sharing personal details in response to unsolicited messages.

Instead, verify any communication by contacting the organization directly through its official website or phone number. This simple habit can prevent attackers from tricking you into giving up sensitive login credentials. In addition, consider enabling spam filters and multi-factor authentication wherever possible.

Consider a Fraud Alert or Credit Freeze

Because this breach involves a financial advisory firm, affected individuals may want to place a fraud alert on their credit file. A fraud alert makes it harder for someone to open new credit accounts using your name. This step is free and can be renewed periodically for continued protection.

Alternatively, a credit freeze offers an even stronger layer of protection by restricting access to your credit file entirely. While this requires a bit more effort to lift when applying for new credit, it significantly reduces fraud risk. Given the uncertainty around what data was exposed, this precaution may offer helpful peace of mind.

Stay Informed and Consider Legal Options

As more details about this breach emerge, affected individuals should stay alert for official updates from Baker Tilly Advisory Group. In addition, checking the California Attorney General’s breach notification page can provide further context as it becomes available. Staying informed helps you respond quickly if new risks come to light.

If you believe you were affected by this breach, consulting a data breach attorney may help clarify your legal options. Many attorneys offer free case evaluations to determine whether you qualify for compensation. This step costs nothing upfront and can help you understand your rights moving forward.

Get a Free Case Review

Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.



More Information

Official data breach notification from California Attorney General

Related Data Breaches

View the full list of tracked data breaches →