H&R Block, a major tax-preparation company, reported a data breach to the Attorney General of Montana on October 3, 2024. The breach, which occurred between August 5 and 7, 2024, involved unauthorized access to sensitive personal information, including names, Social Security numbers, financial account details, driver’s license numbers, and dates of birth. The company discovered the breach on August 9, 2024, and immediately initiated an investigation with third-party cybersecurity experts to understand the scope of the incident and secure their systems. Following the investigation, H&R Block began notifying affected individuals on September 24, 2024.
The breach stemmed from an unauthorized third party who gained access to specific client accounts or MyBlock accounts using information obtained from external sources. Although the company has not disclosed the exact method used for the unauthorized access, H&R Block took swift action to address the issue. It is believed that the breach was contained within a short time frame, specifically between August 5 and 7, 2024. Upon confirming that sensitive data had been accessed, H&R Block reviewed the compromised files to determine the extent of the exposure and identify those affected.
In response to the breach, H&R Block sent personalized data breach notification letters to impacted individuals. These letters outlined the type of sensitive information that was compromised and offered guidance on the next steps for protecting personal data. Additionally, H&R Block is providing affected individuals with complimentary credit monitoring services to help mitigate the potential risks associated with identity theft and fraud.
H&R Block, based in Kansas City, Missouri, is one of the largest tax-preparation companies in the United States, with a presence in Canada and Australia. The company operates over 12,000 retail tax offices globally and offers services such as business consulting and online tax preparation. With a workforce of over 4,000 full-time employees and around 70,000 seasonal workers, H&R Block generates approximately $3.6 billion in annual revenue.
Reference: