TaxAct

On January 12, 2016, the California Office of the Attorney General reported a data breach involving Blucora, Inc. An unauthorized third party accessed TaxAct accounts between November 10 and December 4, 2015, potentially exposing user names and passwords, as well as tax returns that may contain names and Social Security numbers. Specific details about the number of individuals affected are unknown.

Source: https://oag.ca.gov/ecrime/databreach/reports/sb24-59569

TPRM report: https://www.rankiteo.com/company/taxact

"id": "tax826072825",
"linkid": "taxact",
"type": "Breach",
"date": "11/2015",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'industry': 'Financial Services',
                        'name': 'Blucora, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Access',
 'data_breach': {'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['User names',
                                              'Passwords',
                                              'Tax returns',
                                              'Names',
                                              'Social Security numbers']},
 'date_detected': '2016-01-12',
 'date_publicly_disclosed': '2016-01-12',
 'description': 'An unauthorized third party accessed TaxAct accounts between '
                'November 10 and December 4, 2015, potentially exposing user '
                'names and passwords, as well as tax returns that may contain '
                'names and Social Security numbers.',
 'impact': {'data_compromised': ['User names',
                                 'Passwords',
                                 'Tax returns',
                                 'Names',
                                 'Social Security numbers']},
 'references': [{'date_accessed': '2016-01-12',
                 'source': 'California Office of the Attorney General'}],
 'threat_actor': 'Unauthorized Third Party',
 'title': 'Blucora, Inc. Data Breach',
 'type': 'Data Breach'}