Skip to content
Submit incident
DII-2026-00257
ReportedReported by fewer than three independent publishers, with no official finding.

More than 2 million user records from TaxAct allegedly acquired; 450k already leaked (with correction)

On August 13, DataBreaches was contacted anonymously on Signal by someone reporting that they had acquired more than 2 million records with clients’ phone numbers, usernames, and email addresses from TaxAct, which is...

17 August 2026 · Hacking and intrusion
17 August 2026
DII-2026-002574 sources ↓
Quick facts
Category
Hacking and intrusion
Source
DataBreaches.net
Date
17 August 2026
Drafted by
Raidu Incident Detection

What happened

Not publicly disclosed.

Classification

Category
Hacking and intrusion
Industry
Financial services and insurance

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

DataBreaches.net
More than 2 million user records from TaxAct allegedly acquired; 450k already leaked (with correction)
17 August 2026
kiplinger.com
positive reviews
taxact.com
its website
securitytxt.org
security.txt file