We are notifying you so you can take steps to help protect your information,' the company added.Īfter discovering the attacks, Intuit temporarily disabled the breached TurboTax accounts. Intuit has taken various measures to help ensure that the accounts of affected customers are protected. 'We deeply regret that this incident may affect you. 'By accessing your account, the unauthorized party may have obtained information contained in a prior year's tax return or your current tax return in progress, such as your name, Social Security number, address(es), date of birth, driver's license number and financial information (e.g., salary and deductions), and information of other individuals contained in the tax return,' Intuit explained. The company's investigation revealed that the threat actors used credentials (usernames and passwords) obtained from 'a non-Intuit source' to gain access to the accounts. Intuit discovered during a security review that an undisclosed number of TurboTax accounts was breached and customer info was exposed. TurboTax accounts hacked using reused credentials

0003% of customers and some of those confirmed by the customer after the fact as their activity (not an ATO),' Rick Heineman, Intuit Corporate Communications Vice President, told BleepingComputer. 'We have more than 100 million customers and see billions of transactions per year with ATO notifications going to less than. This type of attack works incredibly well against targets who use the same login credentials for multiple sites or services. In account takeover attacks, cybercriminals gain access to their victims' accounts using credentials stolen from other online services following past data breaches. In a breach notification letter sent to affected customers earlier this month, the company said that this was not a 'systemic data breach of Intuit.' Financial software company Intuit has notified TurboTax customers that some of their personal and financial information was accessed by attackers following what looks like a series of account takeover attacks.

Intuit mint contact