Forrestall CPAs Data Breach

Forrestall CPAs, an accounting firm based in Sugar Hill, Georgia, has notified clients that an unauthorized individual gained access to certain of its systems and viewed and obtained files containing personal information. Accounting firms handle some of the most sensitive financial and identifying information their clients maintain, and when that information is placed at risk, the firm responsible bears an obligation to investigate thoroughly, notify those affected, and help mitigate any resulting harm.

Forrestall CPAs’s Data Breach Investigation

According to a notification letter filed with the California Attorney General, Forrestall CPAs recently concluded an investigation into an incident involving unauthorized access to certain of its systems. Upon discovering the incident, the firm took measures to secure its network, launched an investigation, and engaged a cybersecurity firm to assist. That investigation determined that between December 22, 2025, and December 30, 2025, an unauthorized individual viewed and obtained certain files on the firm’s network. Forrestall CPAs also notified law enforcement about the incident and states it will cooperate with any further investigation.

The firm reviewed the files involved and determined that at least one or more of them included each affected client’s name in combination with certain other personal data elements specific to that individual. Forrestall CPAs has not publicly specified a single universal list of data types affecting every client, which is consistent with how many breach notifications work: the exact combination of information exposed can vary from person to person depending on which specific files an intruder accessed, so notification letters are often written to cover that variation rather than asserting one fixed list applies to everyone who received a letter.

Tax and accounting firms are a common target for this kind of intrusion because of the concentration of sensitive data they hold on behalf of many clients at once, including Social Security numbers, financial account information, and prior tax filings, any of which can be leveraged for identity theft or fraudulent tax filings if it falls into the wrong hands. A roughly eight-day window of unauthorized access, as described in this incident, is enough time for an intruder to review and exfiltrate a substantial volume of client files before detection, which is part of why firms in this industry are increasingly investing in monitoring and rapid-response capabilities alongside more traditional security controls.

Forrestall CPAs’s response, including engaging outside cybersecurity specialists and notifying law enforcement, reflects a standard incident-response process once a firm confirms unauthorized network access. The complimentary identity monitoring services being offered to affected clients are a typical mitigation step in cases like this, intended to help detect any misuse of the exposed information after the fact even though they cannot undo the initial access itself.

When Did This Breach Occur?

Forrestall CPAs’s investigation determined that the unauthorized access occurred between December 22, 2025, and December 30, 2025. The firm has not publicly disclosed the specific date it first discovered the intrusion or the date notification letters were sent to affected individuals.

What Information Was Breached?

Forrestall CPAs has stated that the files involved included each affected client’s name in combination with certain other personal information specific to that individual, without publicly disclosing one universal list of data types for all clients. The firm has not confirmed additional specifics such as Social Security numbers or financial account details beyond what is described in its notification letter.

What You Can Do

• Enroll in the complimentary one-year identity monitoring membership through Epiq’s Privacy Solutions ID, offered in the notification letter.
• Place a fraud alert or security freeze on your credit files with Equifax, Experian, and TransUnion.
• Request a free credit report from each of the three major credit bureaus and review it for unfamiliar accounts or inquiries.
• Consider applying for an IRS Identity Protection PIN if you are concerned about fraudulent tax filings.
• Report any suspicious account activity to your financial institution and, if needed, to local law enforcement or the Federal Trade Commission.

File a Data Breach Lawsuit Against Forrestall CPAs

If you received a notice from Forrestall CPAs about this incident, you may have legal options available to you.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.