What is the official website of TaxAct ?

The official website of TaxAct is http://www.taxact.com.

What is TaxAct's cybersecurity risk score?

TaxAct has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has TaxAct experienced?

According to Rankiteo, TaxAct currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has TaxAct been affected by any supply chain cyber incidents ?

According to Rankiteo, TaxAct has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does TaxAct have SOC 2 Type 1 certification ?

According to Rankiteo, TaxAct is not certified under SOC 2 Type 1.

Does TaxAct have SOC 2 Type 2 certification ?

According to Rankiteo, TaxAct does not hold a SOC 2 Type 2 certification.

Does TaxAct comply with GDPR ?

According to Rankiteo, TaxAct is not listed as GDPR compliant.

Does TaxAct have PCI DSS certification ?

According to Rankiteo, TaxAct does not currently maintain PCI DSS compliance.

Does TaxAct comply with HIPAA ?

According to Rankiteo, TaxAct is not compliant with HIPAA regulations.

Does TaxAct have ISO 27001 certification ?

According to Rankiteo,TaxAct is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does TaxAct operate in ?

TaxAct operates primarily in the Software Development industry.

How many employees does TaxAct have ?

TaxAct employs approximately 394 people worldwide.

Does TaxAct own any subsidiaries ?

TaxAct presently has no subsidiaries across any sectors.

How many LinkedIn followers does TaxAct have ?

TaxAct's official LinkedIn profile has approximately 37,804 followers.

What is the NAICS classification code for TaxAct ?

TaxAct is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does TaxAct have a Crunchbase profile ?

Yes, TaxAct has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/tax-act.

Does TaxAct have a LinkedIn profile ?

Yes, TaxAct maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/taxact.

How many cybersecurity incidents has TaxAct experienced ?

As of September 15, 2026, Rankiteo reports that TaxAct has experienced 1 cybersecurity incidents.

How many peer or competitor companies does TaxAct have ?

TaxAct has an estimated 30,910 peer or competitor companies worldwide.

What types of cybersecurity incidents has TaxAct faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

TaxAct

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

TaxAct Vendor Cyber Rating & Cyber Score

taxact.com

cb in

Add Your Compliance Badge

TaxAct helps everyday Americans get every tax advantage they deserve by finding credits and deductions they never even knew existed. Our tax preparation software offers easy guidance and ensures your maximum tax refund. We strive to build a team of like-minded experts in both tax and technology who align with our brand purpose, are advocates for our customers and have a fresh, non-traditional approach to the tax industry.

TaxAct

TaxAct CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

TaxAct

Breach

11/2015

TAX826072825

Loading…

A.I.

TaxAct Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for TaxAct

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for TaxAct in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for TaxAct in 2026.

Incident Types TaxAct vs Software Development Industry Avg (This Year)

No incidents recorded for TaxAct in 2026.

Incident History - TaxAct (X = Date, Y = Severity)

Loading…

SUBSIDIARY

TaxAct Subsidiaries

Parent Company

TaxAct

Software Development

Website: http://www.taxact.com

Company Size: 51-200 employees

No subsidiary data available for this company.

Loading…

TaxAct Similar Companies

Google

cb goo.gle

A problem isn't truly solved until it's solved for all. Googlers build products that help create opportunities for everyone, whether down the street or across the globe. Bring your insight, imagination and a healthy disregard for the impossible. Bring everything that makes you unique. Together, we can build for everyone. Check out our career opportunities at goo.gle/3DLEokh

HubSpot

hubspot.com

HubSpot is a leading CRM platform that provides software and support to help businesses grow better. Our platform includes marketing, sales, service, and website management products that start free and scale to meet our customers’ needs at any stage of growth. Today, thousands of customers around the world use our powerful and easy-to-use tools and integrations to attract, engage, and delight customers. HubSpot's award-winning culture has been recognized by Glassdoor, Great Place to Work, Comparably, Fortune, Entrepreneur, Inc., and more. We build connections, careers, and employee growth by creating a workplace that values flexibility, autonomy, and transparency. You can learn more about our commitment to creating an inclusive and diverse workplace in the HubSpot Culture Code. HubSpot is a hybrid company with employees working fully remotely, from an office, or a mix of the two. We are headquartered in Cambridge, MA with offices in Amsterdam, Berlin, Bogota, Dublin, Ghent, London, Madrid, Paris, San Francisco, Singapore, Sydney, Tokyo and Toronto. To learn more about HubSpot, visit www.hubspot.com and to join our team, visit www.hubspot.com/careers

Baidu, Inc.

baidu.com

Baidu is a leading AI company with strong Internet foundation, driven by our mission to “make the complicated world simpler through technology”. Founded in 2000 as a search engine platform, we were an early adopter of artificial intelligence in 2010. Since then, we have established a full AI stack, from deep learning frameworks to models and applications, with industry-leading self-developed technology at every level. Over the past two decades, we have built a diversified portfolio of products and services, spanning an ecosystem of hundreds of millions of users, millions of developers, and hundreds of thousands of enterprises. We have now integrated our leading AI capabilities into our offerings, driving innovative use cases. Join us to shape the future of AI and technology. For media inquiries, contact us at [email protected]. For career opportunities, visit https://talent.baidu.com/static/index.html

Alibaba Group

alibabagroup.com

🌍Alibaba Group is on a mission to make it easy to do business anywhere! Guided by our passion and imagination, we’re leading the way in AI, cloud computing and e-commerce. We aim to build the future infrastructure of commerce, and we aspire to be a good company that lasts for 102 years.

Infor

infor.com

Infor is a global leader in business cloud software products for companies in industry specific markets. Infor builds complete industry suites in the cloud and efficiently deploys technology that puts the user experience first, leverages data science, and integrates easily into existing systems. Over 60,000 organizations worldwide rely on Infor to help overcome market disruptions and achieve business-wide digital transformation. Here are some key insights: • 60,000+ customers • 100+ offices • 1,700+ support experts • 2,000+ partners • 17,000+ employees • 175+ countries where customers are located • 15,000+ cloud customers • 40+ countries with Infor offices

Cox Automotive Inc.

coxautoinc.com

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first- and third-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets. The company has 29,000+ employees on four continents and a portfolio of industry-leading brands that include Autotrader®, Kelley Blue Book®, Manheim®, vAuto®, Dealertrack®, NextGear Capital™, CentralDispatch® and Cox Fleet®. Cox Automotive is a subsidiary of Cox Enterprises Inc., a privately owned, Atlanta-based company with $23 billion in annual revenue. Cox Automotive has been included on Glassdoor’s Best Companies in Tech & AI 2026 and Best Place to Work in 2026 lists.

Thomson Reuters

tr.com

Thomson Reuters (TSX/NDAQ: TRI) informs the way forward by bringing together the trusted content and technology that people and organizations need to make the right decisions. We serve professionals across legal, tax, accounting, compliance, government, and media. Our products combine highly specialized software and insights to empower professionals with the data, intelligence, and solutions needed to make informed decisions, and to help institutions in their pursuit of justice, truth, and transparency. Reuters, part of Thomson Reuters, is a world leading provider of trusted journalism and news. For more information on Thomson Reuters, visit tr.com and for the latest world news, reuters.com.

Groupon

cb greenhouse.io

Groupon is an experiences marketplace that brings people more ways to get the most out of their city or wherever they may be. By enabling real-time mobile commerce across local businesses, live events and travel destinations, Groupon helps people find and discover experiences––big and small, new and familiar––that make for a full, fun and rewarding life. Groupon helps local businesses grow and strengthen customer relationships––resulting in strong, vibrant communities. E-commerce never stands still, our transformation strategy, combined with our strong brand, customer base, and marketplace expertise, ensures we are constantly adapting to the evolving market landscape while delivering value for our customers and merchant partners. Groupon is on a radical journey to transform our business. To meet our aggressive goals we are in the process of building a culture that prioritises fast decisions, open communication, and relentless pursuit of results. In the spirit of transparency, things aren't perfect, there are still processes to change and bureaucracy to break so we need people who want to be on this journey with us. Check out our current opportunities with #TeamGroupon and join us on our exciting mission to become The Ultimate Destination For Local Experiences and Services.

DiDi

didiglobal.com

DiDi Global Inc. is a leading mobility technology platform. It offers a wide range of app-based services across Asia Pacific, Latin America, and other global markets, including ride hailing, taxi hailing, designated driving, hitch and other forms of shared mobility as well as certain energy and vehicle services, food delivery, and intra-city freight services. DiDi provides car owners, drivers, and delivery partners with flexible work and income opportunities. It is committed to collaborating with policymakers, the taxi industry, the automobile industry, and the communities to solve the world’s transportation, environmental, and employment challenges through the use of AI technology and localized smart transportation innovations. DiDi strives to create better life experiences and greater social value, by building a safe, inclusive, and sustainable transportation and local services ecosystem for cities of the future.

Loading…

NEWS

TaxAct CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 05, 2026 08:00 AM

Cybersecurity & Privacy Group Of The Year: Sidley

Sidley Austin LLP won dismissal of key class action claims for bellwether defendant Genworth Financial in a high-profile data breach case...

Read Article

January 07, 2026 08:00 AM

Sharda University Hosts Interactive Session on Income-tax Act, 2025

To enhance understanding of India's new and modernised direct tax framework among students, faculty members, and professionals,...

Read Article

October 11, 2025 07:00 AM

Cybersecurity Software Sale Not Taxable as FTS: ITAT Rules Payments Outside Scope of S. 9(1)(vii) and India-Ireland DTAA as No Human Interface Involved [Read Order]

In addition, the bench noted that the functioning of the software was completely automated and did not involve any human interface or...

Read Article

July 28, 2025 07:00 AM

Nigeria’s tax reform: Implications for the ICT and cybersecurity sector

Nigeria's tax reform: On June 26, 2025, Nigeria enacted four sweeping tax laws: the Nigeria Tax Act (NTA), Nigeria Tax Administration Act..

Read Article

October 22, 2024 07:00 AM

Dems want tax prep firms charged for improper data sharing

A quartet of lawmakers have penned a letter to the Department of Justice asking it to prosecute tax preparation companies for sharing customer data.

Read Article

July 15, 2024 07:00 AM

An apathy of cybersecurity concerns

I've been trying to understand the studious calm that's followed the TSTT breach. What collective noun to describe an industry-wide...

Read Article

February 27, 2024 08:00 AM

TaxAct Reaches $23 Million Taxpayer Data-Sharing Settlement

Online tax preparation company TaxAct Inc. has agreed to pay upward of $23 million to settle claims it violated privacy and tax laws by...

Read Article

December 10, 2023 05:27 PM

IT Security Stories to Watch: Was TaxAct Breached?

Tax preparation software provider TaxAct recently reported cybercriminals may have stolen personal and tax return information from some of its customers.

Read Article

October 01, 2023 07:00 AM

No tax slapped on IT freelancers

The government has kept income from IT freelancing tax-free in the new income tax law as was in the previous Income Tax Ordinance-1984,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-91201

SUMMARY

DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth authorization, then use tokens to disconnect victims' cloud storage connectors.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.8

REFERENCES

CVE-2026-91200

SUMMARY

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries with traversal sequences to write arbitrary files on the developer workstation, enabling code execution.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-91199

SUMMARY

Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied URLs without validating the scheme, host, or resolved address. Authenticated attackers can make the backend issue requests to loopback, private, and link-local addresses including cloud metadata services to read page titles and descriptions of internal resources.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5)

cvss3

Base Score: 5.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.1

REFERENCES

CVE-2026-91198

SUMMARY

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text, schema, table names, filter values and datasource identifiers.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-91197

SUMMARY

Flowable flowable-engine through 8.0.0 contains an XML external entity injection vulnerability in ProcessDiagramLayoutFactory.parseXml() that fails to disable external entity resolution when parsing deployed BPMN resources. Attackers with process deployment privileges can embed DOCTYPE declarations with external entities in BPMN files to read arbitrary local files or trigger requests to internal network endpoints when diagram layout is computed.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

TaxAct Vendor Cyber Rating & Cyber Score

TaxAct A.I CyberSecurity Scoring

TaxAct CyberSecurity News & History

TaxAct Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for TaxAct

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types TaxAct vs Software Development Industry Avg (This Year)

Incident History - TaxAct (X = Date, Y = Severity)

TaxAct Subsidiaries

Parent Company

TaxAct

TaxAct Similar Companies

Google

HubSpot

Baidu, Inc.

Alibaba Group

Infor

Cox Automotive Inc.

Thomson Reuters

Groupon

DiDi

TaxAct CyberSecurity News

Cybersecurity & Privacy Group Of The Year: Sidley

Sharda University Hosts Interactive Session on Income-tax Act, 2025

Cybersecurity Software Sale Not Taxable as FTS: ITAT Rules Payments Outside Scope of S. 9(1)(vii) and India-Ireland DTAA as No Human Interface Involved [Read Order]

Nigeria’s tax reform: Implications for the ICT and cybersecurity sector

Dems want tax prep firms charged for improper data sharing

An apathy of cybersecurity concerns

TaxAct Reaches $23 Million Taxpayer Data-Sharing Settlement

IT Security Stories to Watch: Was TaxAct Breached?

No tax slapped on IT freelancers

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

TaxAct CyberSecurity News & History

TaxAct Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for TaxAct

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types TaxAct vs Software Development Industry Avg (This Year)

Incident History - TaxAct (X = Date, Y = Severity)

TaxAct Subsidiaries

Parent Company

TaxAct

TaxAct Similar Companies

Google

HubSpot

Baidu, Inc.

Alibaba Group

Infor

Cox Automotive Inc.

Thomson Reuters

Groupon

DiDi

TaxAct CyberSecurity News

Cybersecurity & Privacy Group Of The Year: Sidley

Sharda University Hosts Interactive Session on Income-tax Act, 2025

Cybersecurity Software Sale Not Taxable as FTS: ITAT Rules Payments Outside Scope of S. 9(1)(vii) and India-Ireland DTAA as No Human Interface Involved [Read Order]

Nigeria’s tax reform: Implications for the ICT and cybersecurity sector

Dems want tax prep firms charged for improper data sharing

An apathy of cybersecurity concerns

TaxAct Reaches $23 Million Taxpayer Data-Sharing Settlement

IT Security Stories to Watch: Was TaxAct Breached?

No tax slapped on IT freelancers

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?