Olson & Company PC Data Breach — Class Action Review

Olson & Company PC operates as a professional accounting, tax preparation, and financial advisory firm, providing critical business and individual financial services. Because of the nature of their practice, the firm routinely collects, processes, and stores an extensive volume of highly sensitive personal and corporate financial data on behalf of its clients. This includes comprehensive tax records, profit and loss statements, payroll files, and direct personal identifiers necessary for financial planning, auditing, and compliance reporting. Consequently, Olson & Company PC functions as a lucrative repository for cybercriminals seeking high-value information that can be weaponized for financial fraud and identity theft.

In 2025, Olson & Company PC reported a significant data security incident to the Office of the Indiana Attorney General. While the precise mechanics of the breach are still under active investigation, cyberattacks targeting accounting and professional services firms typically involve sophisticated ransomware deployments, unauthorized intrusions into internal document management systems, or compromised employee credentials. Professional services organizations are prime targets for threat actors seeking to bypass perimeter defenses, exploit vulnerabilities in client portals, or intercept sensitive communications containing unencrypted financial documents.

Preliminary reports and industry disclosures indicate that the incident compromised a wide array of confidential information, exposing clients and employees to severe, long-term risks. The exposed data categories routinely include full legal names, Social Security numbers, dates of birth, home addresses, banking and direct deposit account details, and exhaustive tax return documentation containing Adjusted Gross Income and employer identification numbers. When malicious actors obtain this combination of financial and personal data, victims face an immediate and elevated risk of tax-related identity theft, fraudulent credit card applications, unauthorized bank account takeovers, and synthetic identity creation that can persist for years.

As a professional entity handling sensitive financial and tax data, Olson & Company PC had legal obligations under state data protection statutes, the Federal Trade Commission (FTC) Act, and common law standards of care to implement robust administrative, physical, and technical safeguards. These standards require continuous network monitoring, mandatory multi-factor authentication, robust data encryption both at rest and in transit, and regular vulnerability assessments. The occurrence of a widespread data breach strongly suggests potential failures or lapses in maintaining adequate cybersecurity infrastructure, which directly enabled unauthorized access to confidential records.

Receiving a formal data breach notification letter from Olson & Company PC serves as official legal acknowledgment that your private financial information was compromised due to corporate negligence. Under modern data breach jurisprudence, affected individuals possess the legal standing to initiate or participate in class action litigation against the firm for failing to secure their data. You do not need to wait until you experience actual financial loss or fraudulent activity to take legal action; the increased risk of future harm and the necessary costs of credit monitoring are actionable injuries. Our firm evaluates these cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.