TKH Group, PC has disclosed a data breach affecting more than 3,100 individuals. The incident involved unauthorized access to the firm’s internal systems, potentially exposing financial and identity-related information.
TKH Group’s Data Breach Investigation
TKH Group, PC, a professional services firm specializing in accounting, tax preparation, payroll, and investment services, reported a cybersecurity breach on September 21, 2025—the same day it was detected. The firm immediately launched an incident response effort that included assistance from third-party cybersecurity and digital forensics experts.
The investigation confirmed that unauthorized actors had gained access to the internal network and potentially viewed or acquired files containing sensitive personal information. The exposed data included not only contact and identity information but also highly sensitive financial records related to the firm’s service offerings.
TKH Group serves both individuals and businesses, meaning the breach may have exposed Social Security numbers, banking details, and tax-related financial data. Though the firm states it has not received reports of identity theft as of this writing, the nature of the information involved poses significant risk for fraud and long-term harm.
Following the breach, TKH Group took steps to secure its systems, reported the incident to state and federal authorities, and notified credit bureaus. Affected individuals are being offered free access to single-bureau credit monitoring services through Epiq – Privacy Solutions ID. These services include fraud alerts and monitoring features designed to detect unauthorized changes in a consumer’s credit file.
This incident demonstrates the critical importance of cybersecurity in the financial and tax services industry. When trusted firms fail to adequately secure their systems, their clients bear the brunt of the consequences.
When Did This Breach Occur?
The breach occurred and was discovered on September 21, 2025.
What Information Was Breached?
The following data may have been exposed:
-
First and last name
-
Home address
-
Date of birth
-
Financial information related to accounting, tax preparation, payroll, and investment services
-
Banking information
-
Social Security number
-
Government-issued ID numbers (e.g., driver’s license)
What You Can Do
If you received a notification from TKH Group or suspect you may have been affected:
-
Enroll in the free credit monitoring service provided through Epiq as soon as possible.
-
Review your credit reports from annualcreditreport.com or call 1-877-322-8228.
-
Monitor your financial accounts and statements for unauthorized transactions.
-
Place a fraud alert or credit freeze with Equifax, Experian, or TransUnion.
-
Report suspicious activity immediately to your bank and the FTC via identitytheft.gov.
Even without confirmed misuse, the nature of this breach makes proactive protection critical. Don’t delay in safeguarding your identity.
File a Data Breach Lawsuit Against TKH Group
If your personal or financial information was compromised in the TKH Group data breach, you may qualify to join a class action lawsuit. Companies that handle sensitive personal and financial data must maintain strong cybersecurity practices. When they fail and customer data is exposed, affected individuals have the right to seek compensation.
A class action lawsuit could help you recover costs related to fraud prevention, time spent protecting your identity, emotional distress, and any financial losses incurred as a result of the breach. Class Action U is here to support you in taking that next step.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
