Khan and Associates CPA Data Breach Lawsuit Investigation
On October 6, 2025, Khan and Associates CPA began notifying clients that an unauthorized party accessed the firm’s Intuit tax-filing software and submitted fraudulent federal and state returns. If you received a breach notice, you could be entitled to compensation and complimentary credit monitoring services. Request a free, confidential case review today.
Breach Snapshot
- Incident window: July 09 – 16, 2025
- Discovery date: July 16, 2025
- Notice mailed: October 06, 2025
- Regulatory filing: California Office of the Attorney General — October 17, 2025
- Systems involved: Third-party Intuit tax-filing platform
What Happened
An investigation revealed that on or around July 09, 2025 an unauthorized user obtained access credentials to Khan and Associates CPA’s Intuit account. The intruder filed both federal and state tax returns on behalf of certain clients before the activity was identified on July 16, 2025. The fraudulent submission was ultimately rejected, and law-enforcement agencies were notified.
Information Exposed
The firm determined that data contained in affected tax forms was accessed. According to the breach letter, the information may include:
- Social Security number
- Other government identification numbers
- Full name
- Bank account information
- Other sensitive information provided for tax preparation
Company Response
Khan and Associates CPA reports taking the following steps after detecting the intrusion:
- Terminated unauthorized access and engaged IT specialists
- Enabled dual-factor authentication firm-wide and within Intuit
- Reset passwords and login credentials across all platforms
- Reinforced firewall software
- Notified the FBI, IRS, and U.S. Secret Service
- Offering 12 months of complimentary identity-monitoring services through Kroll (credit monitoring, fraud consultation, identity-theft restoration)
Your Next Steps
The breach notice outlines several actions you can take immediately:
- Enroll in the free Kroll identity-monitoring services by 11/30/2025 at Enroll.krollmonitoring.com/redeem
- Place a free fraud alert or security freeze with Experian, Equifax, or TransUnion
- Request an IRS Identity Protection PIN to secure future tax filings (irs.gov)
- Review bank and credit-card statements for unfamiliar transactions
- Report suspected identity theft to the FTC (identitytheft.gov) and your state Attorney General
- Change any overlapping passwords, usernames, or security questions
Free Legal Consultation
Data-breach laws allow victims to seek compensation for out-of-pocket losses, time spent, and privacy harms. Our data-privacy attorneys are investigating potential claims against Khan and Associates CPA. Contact us to discuss your rights at no cost.
Company Overview
- Legal Name: Khan and Associates CPA
- Industry: Accounting and Tax Preparation
- Year Founded: 1998
- Headquarters: 301 Massachusetts Avenue, Cherry Hill, NJ, USA
- Website & Support: khanassociates.com
- Social Profiles: Facebook, LinkedIn
Frequently Asked Questions
How did the Khan and Associates CPA breach occur?
An unauthorized party accessed the firm’s Intuit tax-filing software between July 09 and 16, 2025 and attempted to file fraudulent tax returns.
What personal data was involved in the Khan and Associates CPA data breach?
Potentially exposed items include Social Security numbers, names, bank-account details, other government IDs, and additional data listed on your 2024-2025 tax forms.
Is Khan and Associates CPA offering free credit monitoring?
Yes. The firm is providing 12 months of Kroll credit monitoring, fraud consultation, and identity-theft restoration at no cost.
Can I sue Khan and Associates CPA for the data breach?
You may have legal claims under state and federal data-breach statutes. Request a complimentary case evaluation to learn more about potential compensation.
What deadlines apply to the Kroll enrollment?
You must activate the provided Kroll services by November 30, 2025 using the unique code in your mailed notice.