FASS Data Breach Exposes Personal and Financial information

Financial Administrative Support Services (FASS), a San Jose, California-based accounting firm, disclosed a data breach involving unauthorized access to its computer systems in 2025.

FASS provides outsourced accounting and consulting services, including payroll and financial management, to more than 80 nonprofit organizations in San Jose, the San Francisco Bay Area and beyond. Because of its services, individuals who receive a notification letter may not have had a direct relationship with FASS itself.

The breach was disclosed to the California Attorney General and to the Vermont Attorney General on Sept. 25, 2026.

On May 26, 2025, FASS identified suspicious activity on its computer network. The company then took steps to secure its network and restore its systems.

On June 11, 2025, further suspicious activity was detected. Upon identifying the additional activity, FASS brought its systems fully offline to ensure their security and to investigate the nature and scope of the intrusion.

The investigation revealed two separate periods of unauthorized access.

An unknown actor first gained access to certain FASS systems prior to March 26, 2025, at least two months before the company first detected the activity. The actor then gained access again between June 8, 2025, and June 11, 2025. During these periods, the actor accessed and potentially copied certain information stored on the company's systems.

After discovering the unauthorized access, FASS initiated a review of the impacted information. The purpose of the review was to determine exactly what data was involved and to identify the individuals whose information was affected.

The types of information exposed in the breach included names, Social Security numbers, financial account codes and credit and debit account information.

FASS's response to the breach

FASS is offering affected individuals complimentary credit monitoring services through IDX. Affected individuals can enroll by visiting the IDX enrollment page and entering the unique enrollment code provided in their notification letter.

The deadline to enroll is Dec. 25, 2026.

FASS has also established a dedicated assistance line for affected individuals at 1-866-200-0959. IDX representatives are available to answer questions Monday through Friday from 9 a.m. to 9 p.m. Eastern Time. Individuals may also contact FASS directly at 408-513-8774 or write to 3180 Newberry Drive, Suite 200, San Jose, CA 95118.