Anderson Bookkeeping & Tax Data Breach — Class Action Review

Anderson Bookkeeping & Tax operates as a trusted financial and accounting partner for individuals and small-to-medium-sized businesses across Indiana. The firm provides essential professional services, including comprehensive tax preparation, corporate and individual bookkeeping, payroll processing, and year-round financial consulting. Because of the nature of these services, Anderson Bookkeeping & Tax routinely collects, processes, and stores vast quantities of highly sensitive, private information. To properly manage tax returns and financial statements, the firm must maintain deep visibility into its clients' personal lives and corporate finances, making it a centralized repository for some of the most confidential data a person or business can possess.

In 2025, Anderson Bookkeeping & Tax reported a significant data security incident to the Indiana Attorney General, raising serious concerns among clients whose financial and personal records were entrusted to the firm. While the precise vectors of such attacks can vary, breaches affecting bookkeeping and tax preparation firms typically involve sophisticated cyber threats such as unauthorized network intrusions, ransomware deployments, or third-party vendor compromises. Because accounting firms serve as lucrative targets for malicious actors seeking high-value financial documentation, any failure in digital perimeter defense or internal security protocols can expose an entire database of sensitive client records to unauthorized third parties.

The data compromised in incidents involving financial and tax firms typically includes full names, Social Security numbers, dates of birth, detailed tax return documents, wage and income statements, banking details, and corporate financial records. The exposure of this specific combination of data creates severe, long-term risks for victims. Social Security numbers and tax return information provide cybercriminals with all the necessary ingredients to commit complex tax refund fraud, open fraudulent lines of credit, or assume a victim's identity entirely. Furthermore, exposed banking details and routing numbers leave individuals and business owners immediately vulnerable to unauthorized wire transfers, bank account takeovers, and devastating financial losses.

Under federal and state law, financial and accounting service providers like Anderson Bookkeeping & Tax are bound by strict legal obligations to secure and protect the sensitive consumer data they collect. Under the Gramm-Leach-Bliley Act (GLBA) and applicable state data protection standards, entities handling non-public personal financial information are required to implement rigorous administrative, technical, and physical safeguards. The occurrence of a data breach strongly suggests a potential failure of these mandated security standards, indicating that the firm may have failed to maintain adequate encryption, robust firewall protections, or proper employee cybersecurity training.

Receiving a data breach notification letter from Anderson Bookkeeping & Tax is a formal acknowledgement that your private information was compromised due to inadequate security measures. Legally, this notice serves as confirmation that your data was exposed, which provides you with the necessary legal standing to participate in a class action lawsuit against the firm. Importantly, victims do not need to prove that they have already suffered direct financial theft to seek legal recourse; the increased risk of future identity theft and the loss of privacy are actionable harms. Our firm evaluates these cases on a contingency fee basis, meaning you pay nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.