The California Office of the Attorney General disclosed a data breach affecting SOS Tax on March 22, 2018. The incident involved the potential compromise of sensitive personal information, including names, dates of birth, Social Security numbers, and email addresses of an unspecified number of individuals. While the exact scale of the breach remains undetermined, the exposed data poses significant risks, such as identity theft, financial fraud, and phishing attacks targeting the victims. The breach highlights vulnerabilities in the company’s data protection measures, raising concerns about the security of customer information handled by tax preparation services. No immediate details were provided on whether the breach resulted from external cyberattacks, insider threats, or systemic vulnerabilities, but the exposure of Social Security numbers a high-value target for cybercriminals suggests severe implications for affected individuals. The lack of clarity on the number of victims further complicates risk assessment and mitigation efforts for those potentially impacted.
Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-134718
TPRM report: https://www.rankiteo.com/company/s-o-s-tax
"id": "s-o019091825",
"linkid": "s-o-s-tax",
"type": "Breach",
"date": "10/2017",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 'Unknown',
'industry': 'Tax Services',
'location': 'California, USA',
'name': 'SOS Tax',
'type': 'Business'}],
'data_breach': {'number_of_records_exposed': 'Unknown',
'personally_identifiable_information': ['names',
'dates of birth',
'social security '
'numbers',
'emails'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)']},
'date_publicly_disclosed': '2018-03-22',
'description': 'The California Office of the Attorney General reported a data '
'breach involving SOS Tax on March 22, 2018. The breach may '
'have compromised personal information, including names, dates '
'of birth, social security numbers, and emails, but the '
'specific number of individuals affected is unknown.',
'impact': {'data_compromised': ['names',
'dates of birth',
'social security numbers',
'emails'],
'identity_theft_risk': 'High (PII exposed)'},
'references': [{'source': 'California Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'California Office of '
'the Attorney General'},
'response': {'law_enforcement_notified': 'Yes (California Office of the '
'Attorney General)'},
'title': 'SOS Tax Data Breach (2018)',
'type': 'Data Breach'}