The California Office of the Attorney General disclosed a **data breach** affecting **Intuit’s TurboTax platform** in April 2015. Unauthorized actors gained access to user accounts between **February 1, 2014, and February 27, 2015**, potentially compromising **prior-year tax return information**. While the exact number of affected individuals remains undisclosed, the breach exposed sensitive financial data, including tax filings, which could enable identity theft, fraudulent tax submissions, or financial exploitation. The incident highlighted vulnerabilities in account security, raising concerns over the protection of user data within tax preparation services. Intuit did not confirm whether the breach resulted in direct financial losses for users, but the exposure of tax-related data poses significant risks to personal and financial security.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-49249
TPRM report: https://www.rankiteo.com/company/intuit
"id": "int546091725",
"linkid": "intuit",
"type": "Breach",
"date": "2/2014",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'Unknown',
'industry': 'Financial Software / Tax Preparation',
'location': 'California, USA',
'name': 'Intuit',
'type': 'Corporation'}],
'data_breach': {'number_of_records_exposed': 'Unknown',
'sensitivity_of_data': 'High (tax-related personal data)',
'type_of_data_compromised': ['tax return information']},
'date_detected': '2015-04-06',
'date_publicly_disclosed': '2015-04-06',
'description': 'The California Office of the Attorney General reported that '
'Intuit experienced a data breach involving unauthorized '
'access to TurboTax accounts. The breach was identified '
'between February 1, 2014, and February 27, 2015, with '
"potentially compromised information related to users' prior "
'year tax returns, although specific numbers of affected '
'individuals are unknown.',
'impact': {'data_compromised': ['prior year tax returns'],
'systems_affected': ['TurboTax accounts']},
'references': [{'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['California Office of '
'the Attorney '
'General']},
'title': 'Intuit TurboTax Unauthorized Account Access (2015)',
'type': 'Data Breach / Unauthorized Access'}