Summary
- Environment: Accounting firm network files
- Operational impact: Potential access to personal-information files; outage not quantified
- Financial impact: No confirmed incident cost quantified
- Record status: Developing record. Reviewed November 12, 2026; updated as evidence emerges.
What happened
Cornick Garber Sandler found that files may have been accessed or removed between February 14 and March 26, 2025. Its review identified personal-data impact on March 12, 2026. [3]
Impact
Potential fields varied by person: names with birth dates, Social Security numbers, government or taxpayer IDs, health-insurance information or account numbers. [3] Indiana’s November register, row 317, reports 5,864 affected individuals, including six Indiana residents. Its separate Voxx entry is not added to that count. [1]
Timeline
Data review completed
Personal information was identified among potentially accessed files.
[3]Public notice issued
The security notice announced notifications beginning that day; Indiana separately lists April 2 as notification sent.
[1][3]Later sample letter issued
A later letter described the same 2025 intrusion.
[2]Briefing updated
This briefing was last reviewed and updated on November 12, 2026.
Threat Group & Attack Vector
The reviewed notices do not establish the initial entry method or confirm removal of every potentially affected file.
Actors
- No threat actor group has been identified in the reviewed public evidence.
TTPs
- No specific ATT&CK technique is mapped from the available evidence.