CMC Tax Services, Inc. suffered a data breach where an unauthorized third party infiltrated their network over an extended period, spanning from November 30, 2020, to May 17, 2021. The intrusion resulted in the exposure of sensitive client personal information, including full names and Social Security numbers (SSNs)—highly valuable data for identity theft and financial fraud. The breach was formally reported to the California Office of the Attorney General on July 20, 2021, indicating a delayed discovery or disclosure. The compromised data poses severe risks to affected individuals, as SSNs are permanent identifiers often exploited in fraudulent activities such as loan applications, tax fraud, or unauthorized account openings. The prolonged access period suggests potential lateral movement within the network, increasing the likelihood of extensive data exfiltration. While the exact number of impacted clients remains undisclosed, the nature of the exposed data aligns with high-severity incidents involving customer personal information leaks, amplifying reputational, legal, and financial repercussions for the company.