Clients of the accounting and advisory firm Baker Tilly who received a November 2026 data breach notice may be covered by a lawsuit filed in New York federal court. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes a class action complaint. The statements below are unproven allegations. Baker Tilly Advisory Group, LP has not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Is This About?
Baker Tilly Advisory Group, LP, one of the largest accounting and advisory firms in the U.S., has been named in a lawsuit filed in the U.S. District Court for the Southern District of New York on November 12, 2026, three days after it began mailing data breach notices. OpenClassActions.com has not yet read the complaint, so its claims, the people it seeks to represent and the relief it requests are not confirmed here. Any claims are allegations; Baker Tilly has not answered them in court and no judge has ruled.Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Did Baker Tilly Report?
Baker Tilly filed a breach notice with the California Attorney General on November 9, 2026, listing September 2, 2026 as the date of the breach. Its notice letter, also dated November 9, says that on September 6, 2026, the firm became aware of a potential cybersecurity incident involving information stored on a platform operated by a third-party service provider that Baker Tilly uses in its work for clients. The letter says the unauthorized actor “was able to obtain data relating to certain Baker Tilly clients.”Baker Tilly says it finished reviewing the affected data on October 28, 2026, and then worked to confirm contact information before mailing notices. It says it has notified law enforcement and has found no evidence of continued unauthorized access to its own network or systems.
What Information Was Involved?
The sample letter Baker Tilly filed with California fills in the types of information separately for each recipient, so the data varies by person. People who received a letter should check it for the information listed in their case. Baker Tilly has not publicly said how many people were notified or named the service provider.Baker Tilly is offering 24 months of free credit and identity monitoring through Experian IdentityWorks, with an activation code and an enrollment deadline printed on each letter.
What Happens Next?
If more suits are filed over the same breach, they are often combined before one judge with a consolidated complaint. Baker Tilly would then respond, which in data breach cases often means a motion to dismiss. Any payment would come only from a later settlement or judgment approved by the court; there is no claim form, settlement or deadline now. OpenClassActions.com will update this page with the complaint’s claims and proposed class definition once it is reviewed.Questions
What happened in the Baker Tilly data breach?
Baker Tilly says that on September 6, 2026, it became aware of a potential cybersecurity incident involving information stored on a platform run by a third-party service provider, and that an unauthorized actor obtained data relating to certain clients. Its California filing lists September 2, 2026 as the breach date.
What information was exposed in the Baker Tilly data breach?
It varies by person. The sample notice Baker Tilly filed with the California Attorney General fills in the information types for each recipient, so people who received a letter should check it. Baker Tilly has not said how many people were notified.
Is there a Baker Tilly settlement to claim?
No. A lawsuit was filed in November 2026, no class has been certified and there is no settlement, claim form or deadline. Baker Tilly is offering 24 months of free Experian credit and identity monitoring to people who received its notice letter.
Where was the Baker Tilly lawsuit filed?
In the U.S. District Court for the Southern District of New York, No. 1:26-cv-09911, filed November 12, 2026.
Sources
- California Attorney General: Baker Tilly Advisory Group, LP breach report (breach date Sept. 2, 2026; reported Nov. 9, 2026), including the firm’s sample notice letter
- U.S. District Court for the Southern District of New York docket listing: Stassi v. Baker Tilly Advisory Group, LP, No. 1:26-cv-09911 (filed Nov. 12, 2026)
