Zalaznik & Associates, PLLC, a Walla Walla, Washington-based tax, accounting, and business consulting firm, has notified clients that an unauthorized party accessed its virtual office tax e-file system and viewed sensitive personal and financial information. The firm has begun notifying affected individuals and regulators, and is offering free credit monitoring to those impacted.
Zalaznik & Associates’s Data Breach Investigation
According to a notice filed with the Washington State Attorney General’s office, Zalaznik & Associates detected suspicious activity within its virtual office tax e-file system on March 11, 2026. Upon discovering the activity, the firm states that it moved quickly to secure its network and systems and launched an investigation into the nature and scope of the incident with the help of outside experts.
That investigation determined that an unauthorized actor had gained access to the firm’s systems between September 22, 2025, and March 11, 2026, and had accessed certain files during that window. Zalaznik & Associates then conducted a review of the accessed files to determine what information was involved and to whom it belonged. That review concluded on April 29, 2026, and confirmed that files containing clients’ personal information had been accessed by the unauthorized party.
Zalaznik & Associates has stated that, upon identifying the incident, it reported the matter to the Internal Revenue Service given the nature of its tax-preparation business, notified federal law enforcement, and is working with IRS departments to help ensure that tax returns filed through its office remain secure going forward. The firm also says it is reviewing its internal policies and procedures and has taken steps to bolster its system security to help reduce the risk of a similar incident occurring in the future.
On or about May 29, 2026, Zalaznik & Associates began mailing written notification letters to affected individuals, informing them of the incident and of the steps being taken in response. As of this notice, the firm has confirmed that six hundred eighty-five (685) Washington residents were sent letters, though the true nationwide scope of individuals affected by this breach may not yet be fully known. As is common in cases like this, businesses sometimes under-disclose the initial number of people affected, with the actual number growing as more information becomes available.
As with many data security incidents at accounting and tax-preparation firms, questions remain about how long the intrusion went undetected, what specific security measures were (or were not) in place to protect sensitive client tax data, and whether adequate safeguards existed to prevent unauthorized access to a system that stores Social Security numbers and financial account details. Individuals affected by this breach may have legal options.
When Did This Breach Occur?
Zalaznik & Associates has stated that an unauthorized actor accessed its systems between September 22, 2025, and March 11, 2026, with the suspicious activity first detected on March 11, 2026. The firm’s review of the accessed files concluded on April 29, 2026, and written notice to affected individuals began going out on or about May 29, 2026.
What Information Was Breached?
Zalaznik & Associates has confirmed that the information involved in this incident includes clients’ names, Social Security numbers, and financial account information. This is precisely the kind of sensitive data that criminals can use to commit identity theft, file fraudulent tax returns, or open new lines of credit in a victim’s name.
What You Can Do
If you received a notification letter from Zalaznik & Associates, you should act quickly to protect yourself. Zalaznik & Associates is offering twelve months of complimentary credit monitoring through TransUnion’s Cyberscout service; consider enrolling as soon as possible. You should also:
- Place a fraud alert or credit freeze with Equifax, Experian, and TransUnion.
- Monitor your bank and credit card statements closely for unauthorized activity.
- Watch for signs of tax-related identity theft, such as an unexpected IRS notice about a return you did not file, and consider requesting an IRS Identity Protection PIN.
- Review your free annual credit reports at annualcreditreport.com.
- Report any suspected identity theft to the Federal Trade Commission and your state Attorney General.
File a Data Breach Lawsuit Against Zalaznik & Associates
If your personal information was exposed in the Zalaznik & Associates data breach, you may be entitled to compensation. Companies entrusted with sensitive financial and tax information have a duty to keep that information secure, and when they fail to do so, affected individuals can suffer lasting harm from identity theft and fraud.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
