Baker Tilly Advisory Group is telling some clients that an unauthorized actor obtained data about them from a third-party platform the firm uses, BleepingComputer reported on Wednesday¹.

In a customer notice quoted by BleepingComputer, the firm said it became aware on Sept. 6, 2026, of a potential cybersecurity incident involving information stored on a platform run by a service provider used in connection with client work¹. Baker Tilly said it completed a review of the affected data on Oct. 28 and identified whose information was involved¹.

The notice said: "The unauthorized actor was able to obtain data relating to certain Baker Tilly clients"¹. BleepingComputer said the sample notice did not name the provider, did not give a nationwide count of affected people, and left data types as a placeholder¹.

Data from the Office of the Texas Attorney General, as described by BleepingComputer, listed 10,456 people in Texas and exposed types including Social Security numbers, full names, addresses and other information¹. A national total was not reported¹.

Baker Tilly is a U.S. accounting and advisory firm; BleepingComputer said the Baker Tilly network reports operations in 147 countries and about $6.8 billion in annual revenue¹. After the incident, the firm said it moved to contain it, hired outside investigators and notified law enforcement, according to the report¹.

The company said it has no evidence of unauthorized activity on its own network and no reports of identity theft or fraud tied to the exposure, BleepingComputer reported¹. It is offering affected people 24 months of credit and identity monitoring through Experian¹.

BleepingComputer said it had asked Baker Tilly for more detail on the source, scale and data types and had not received a reply at publication¹. The site said it found no public claims from ransomware groups about the incident¹.