Edwards, Faust & Smith Data Breach Exposes Sensitive Client Information A data breach at Edwards, Faust & Smith, a certified public accounting firm based in Bangor, Maine, has exposed the sensitive personal and financial information of 928 individuals across the U.S., including 837 in Maine. The incident, discovered on April 30, 2026, stemmed from a phishing attack that originated from a fraudulent email posing as a prospective client. The attack compromised a firm computer and a remote server before being contained by May 5, 2026. The breach potentially exposed a range of confidential data, including names, Social Security numbers, tax return information, IRS transcripts, financial account details, dates of birth, government-issued IDs, and client correspondence. The firm collaborated with IT and cybersecurity specialists to investigate the incident and mitigate further risks. Written notifications were sent to affected individuals on May 28, 2026. Shamis & Gentile P.A., a law firm specializing in data breach cases, is investigating potential legal action for those impacted, citing possible compensation for harm or inconvenience resulting from the exposure. The breach underscores the growing threat of phishing attacks targeting professional service providers handling sensitive financial data.