Smith & James, CPAs, a prominent accounting and financial advisory firm based in California, disclosed a data security incident that occurred on or around March 5, 2026. The firm officially reported the breach to regulators on May 28, 2026, confirming that client data was compromised.
The breach exposed a comprehensive range of sensitive personal and financial information. Exposed data categories include Full Name, Social Security Number, Date of Birth, Tax Return Information, Wage and Compensation Information, Financial Account Number, Routing Number, and Home Address. Such highly personal data can be misused for identity theft, fraudulent tax filings, and other financial crimes.
As a financial services provider, Smith & James, CPAs has a legal and ethical obligation to protect its clients' confidential data. These duties are reinforced by California state laws and federal regulations, which mandate robust security measures. A data breach of this nature suggests that these safeguards may have been insufficient, potentially leaving the firm accountable for failing to prevent the exposure of client information.
If you received a data breach notification letter from Smith & James, CPAs, it signifies that your private financial records were accessed by unauthorized parties. This notification provides a basis for you to explore your legal options. Even without immediate financial loss, the increased risk of future fraud constitutes a recognized injury in data breach cases.
Individuals affected by this breach may be able to pursue legal action. Our firm is currently monitoring this incident and offers free case reviews to help you understand your rights and potential for compensation, with no out-of-pocket costs unless we secure a recovery on your behalf.