On May 1, 2025, Optima Tax Relief, LLC, a national tax resolution firm, detected suspicious activity within its network. According to the investigation, a cybercriminal accessed Optima’s network between May 1 and May 6, 2025, and downloaded copies of certain files.
The ransomware group known as CHAOS claimed responsibility, stating they obtained 69 GB of Optima’s data. The group posted about the incident on the dark web Tor network on June 6, 2025.
The breach exposed sensitive personal and financial information, including names, Social Security numbers, and financial information such as account numbers and potentially credit or debit card numbers. The total number of affected individuals has not been released but could be in the thousands.
Optima Tax Relief disclosed the data breach to both the California and Texas Attorneys General on Aug. 15, 2025. The cybersecurity incident affected at least 341 Texas residents. The company is notifying affected individuals by mail.
In addition to required state and federal disclosures, Optima Tax Relief is offering free Kroll identity monitoring services to consumers impacted by the data breach.
If you receive a notice from Optima Tax Relief about this breach, you may want to:
More information about the company and its services can be found on the Optima Tax Relief website.
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.