Douglas M. Smith & Co CPAs Data Breach Lawsuit Investigation
On April 15, 2026, Douglas M. Smith & Co CPAs alerted clients that an unauthorized party accessed its third-party tax-filing software and submitted a fraudulent return in at least one client’s name. If you received this notice, you may have legal rights and time-sensitive steps to protect your identity. Complete the form on this page to join the ongoing investigation and evaluate your claim.
What Happened?
According to DOUGLAS M SMITH & CO CPAS (“Douglas M. Smith & Co CPAs”), the firm discovered on February 23, 2026 that an unauthorized user logged into its third-party tax-filing platform and filed a self-prepared tax return outside the firm’s systems. The firm reports no evidence that its internal network or the tax software itself was the original source of the compromise.
After engaging IT specialists, the investigation concluded that certain sensitive data may have been accessible to the threat actor. The company states there is no sign of a mass data transfer.
Information Exposed
The notice lists the following data elements that could have been accessed:
Social Security number
Other government identification numbers
Name
Bank account information
Additional sensitive information provided to the firm
Company Response
Douglas M. Smith & Co CPAs reports it has:
Implemented additional security measures and password changes
Changed its Electronic Filing Identification Number (EFIN)
Notified the FTC, FBI, IRS and U.S. Secret Service
Offered complimentary credit-monitoring services for 12 months
Committed to notify clients immediately if further suspicious activity is detected
Steps You Can Take
The firm recommends the following immediate actions:
Enroll in the free credit-monitoring service or obtain similar coverage from Experian, Equifax, or TransUnion.
Review your credit reports and financial statements for unauthorized activity.
Place a fraud alert with any of the three major credit bureaus.
Request an IRS Identity Protection PIN: Get an IP PIN.
Report suspected identity theft to the FTC at IdentityTheft.gov and inform your state attorney general via this directory.
Stay alert for IRS correspondence; the IRS will not call to demand payment.
Update any passwords, usernames or security questions you have shared with the firm.
Find additional guidance at the FTC: consumer.ftc.gov.
Potential Legal Options
Data breach victims often incur unreimbursed expenses, tax complications, and time spent restoring their identity. Privacy laws may entitle you to compensation if negligence contributed to the incident. Our investigation focuses on:
Whether sufficient safeguards were in place
The adequacy and timeliness of the company’s notice
Out-of-pocket losses and credit-monitoring costs
To find out if you qualify, submit your contact information now. There is no cost to participate in the investigation.
Company Overview
Douglas M. Smith & Co CPAs is a Fresno, California accounting firm founded in 1997.
Website: smith-cocpa.com
Privacy Policy: smith-cocpa.com/policies.html
Contact / Support: smith-cocpa.com/index.html
Headquarters: 2767 E. Shaw Ave. #102, Fresno, CA USA
Industry: Accounting
Employees: 0-25
Facebook: @FresnoAccountant
Sources
Impacted Entities
Frequently Asked Questions
I received a data breach letter from Douglas M. Smith & Co CPAs — what should I do?
Enroll in the free credit-monitoring service, review your credit reports, consider placing a fraud alert, and obtain an IRS IP PIN. Report any irregularities to the firm and the authorities listed in the notice.
How do I submit a claim related to the Douglas M. Smith & Co CPAs data breach?
Fill out the form on this page to have your situation reviewed. You may be entitled to compensation for identity-theft expenses and lost time.
What information did the Douglas M. Smith & Co CPAs breach expose?
Potentially exposed data includes your name, Social Security number, other government ID numbers, bank account details, and any additional sensitive information provided to the firm.
Did Douglas M. Smith & Co CPAs offer credit monitoring?
Yes. The company offers complimentary credit-monitoring services for 12 months.
How many people were affected?
The total number of impacted individuals was not revealed in the public filing.
Where can I read the official breach notice?
Download the California Attorney General filing directly using the button near the top of this article.
Attorney Advertising. Prior results do not guarantee a similar outcome.
