Intuit Security Breach Exposes Sensitive PII

By
Will Gendron
Apr 18, 2024 4:13 PM
The Intuit data breach, identified on February 27, 2024, potentially exposed sensitive information of affected individuals, including Social Security Numbers, names, addresses, birth dates, driver's license numbers, and financial details. The breach was achieved using username and password combinations obtained from an external source. Intuit has taken measures to protect affected customers, including disabling affected accounts and offering free identity protection services.

Understanding the Intuit Data Breach

On February 27, 2024, Intuit Inc., a leader in financial and tax preparation software known for products like TurboTax and QuickBooks, identified a data breach within their systems. This breach potentially exposed sensitive information, including Social Security Numbers, which could have far-reaching consequences for affected individuals.

Upon discovering the unauthorized access, Intuit promptly initiated an investigation to understand the scope and impact of the incident. The breach was publicly disclosed on March 15, 2024, and Intuit has since been transparent about the steps they are taking to address the situation and support their customers.

The unauthorized access was achieved using username and password combinations obtained from a source outside of Intuit's network. The attacker(s) may have accessed information from prior or current tax returns, which could include names, addresses, birth dates, driver's license numbers, and financial details.

Intuit has taken several measures to protect the accounts of affected customers. These include temporarily disabling the affected TurboTax accounts to prevent further unauthorized access and offering one year of free identity protection, credit monitoring, and identity restoration services through Experian IdentityWorks.

Immediate Steps for Affected Individuals

  1. Reactivate Your Account:
  • Contact Intuit Customer Care at 1-800-944-8596, say "Security" at the prompt, or email TTaxInvestigations@intuit.com for assistance.
  1. Verify Your Identity:
  • Follow the guided process to verify your identity and regain access to your account.
  1. Review Your Personal Information:
  • Check your personal details in MyTurboTax for accuracy, focusing on email addresses and bank account information.
  1. Enable Two-Step Verification:
  • Use the Google Authenticator app for an additional layer of security upon each login.
  1. Change Passwords:
  • Update passwords for non-Intuit online accounts, especially if you use the same credentials across multiple services.
  1. Free Credit Report:
  • You're entitled to one free credit report annually from each of the three nationwide consumer reporting agencies. Visit AnnualCreditReport.com or call 1-877-322-8228 to order yours.

Intuit deeply regrets the inconvenience caused and has set up a security hotline at 1-800-944-8596 for any additional questions or concerns.

Credit Monitoring and Identity Protection

Intuit is offering affected customers complimentary credit monitoring services through Experian IdentityWorks. To activate this service:

  • Enroll by June 30, 2024.
  • Visit the Experian IdentityWorks website and use the provided activation code.
  • Contact Experian’s customer care team at 877-890-9332 if you need assistance with enrollment or identity restoration.

Additional Protective Measures

  • Security Freeze: Consider placing a security freeze on your credit reports to prevent new credit from being opened in your name without your consent.
  • Fraud Alert: Alternatively, place an initial or extended fraud alert on your credit file to alert creditors to verify your identity before extending credit.

For more information on how to protect your personal information and respond to this incident, please refer to the disclosure on the Maine Attorney General's website.

State-Specific Information and Assistance

The breach has affected only one reported individual in the United States and Maine. However, the implications of such breaches are significant, and all users are encouraged to take proactive steps to secure their information.

If you believe you are affected by this data breach, it is crucial to act swiftly and follow the recommended steps to protect your identity and financial well-being.

Affected by the data breach?

Join others and take action at no cost.

Weekly newsletter

Stay up to date with new class action settlements you may join.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.

Consumer Notice

This browser does not support inline PDFs. Please download the PDF to view it: Download PDF