Moss Adams customers’ names and social security information were exposed in a breach last year.
That has been revealed in a new statement from the accounting firm published on the California Attorney General’s data breach website.
The statement explained that the company “detected unusual activity associated with a single Moss Adams employee’s email account” on October 10.
“We immediately took steps to secure the account and launched an investigation,” continued the statement. “Our investigation subsequently determined that the impacted Moss Adams email account was accessed by an unauthorized third party and this account contained some of your personal information, although we do not know if your personal information unauthorized access was limited to information transmitted via email and did not affect any other information systems.”
The company, which is one of the biggest accounting firms in the US, will offer affected customers one-year membership to TransUnion Interactive’s myTrueIdentity credit monitoring and identity restoration service, free of charge.
Moss Adams also urged clients to keep a close eye on their credit information.
The Moss Adams hack attack is only the latest in a long series of cyber incident exposing the need for strong digital defences.
Other high-profile companies falling victim to outside attacks include Capital One, American Express and PayID.
Copyright © 2018 RegTech Analyst