Smith & James, CPAs Data Breach (2026): What Was Exposed & Free Credit Monitoring

✅ Official notice on file. Smith & James, CPAs filed this data breach notice with the California Attorney General on May 28, 2026. Compare it with the letter you received: the official copy is linked below.

View the official notice · Read the letter (PDF)

Smith & James, CPAs reported a data breach caused by unauthorized access to its computer network. The information involved includes Social Security number, date of birth, medical information, health insurance.

Key facts

Discovered Mar 9, 2026
Incident type Network intrusion
Data exposed Social Security number, Date of birth, Medical information, Health insurance
Letter sent May 28, 2026
Reported to California AG May 28, 2026
Company helpline 1-800-405-6108

Free credit monitoring

Smith & James, CPAs is offering 12 months of Cyberscout (TransUnion) at no cost to people who received the letter. Enroll at bfs.cyberscout.com/activate using the activation code printed on your letter.

What to do now

  1. Freeze your credit for free at Equifax, Experian and TransUnion, and request an IRS Identity Protection PIN at irs.gov to block fraudulent tax returns in your name.
  2. Your date of birth is often used to verify identity: add a fraud alert to your credit file so lenders must confirm it is really you.
  3. Review the Explanation of Benefits statements from your insurer for services you never received.
  4. Ask your insurer whether a new member ID can be issued, and check claims made under your policy.
  5. Get your free credit reports at AnnualCreditReport.com and look for accounts you do not recognize.
  6. Call the Smith & James, CPAs helpline at 1-800-405-6108 if you have questions about your letter.

Timeline

  • Mar 9, 2026 — Smith & James, CPAs discovers the incident
  • May 28, 2026 — Notification letters sent
  • May 28, 2026 — Breach reported to the California Attorney General

Other recent data breaches

Source: notification letter and filing submitted by Smith & James, CPAs to the California Attorney General. BreachLetter is not affiliated with Smith & James, CPAs. Details extracted from the official letter; always follow the instructions in your own copy.