HBL CPAs Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating HBL CPAs, P.C. (“HBL”) regarding its recent data breach. The HBL data breach involved sensitive personal identifiable information belonging to over 1,200 individuals.


HBL is a full-service Certified Public Accounting firm based in Arizona. Founded in 1973, HBL offers all the services expected from a quality tax, accounting, and business management firm.2 The services provided by HBL include tax compliance, preparation, and planning, audits of financial statements, and accounting, bookkeeping, and controllership services.2 Headquartered in Tucson, Arizona, HBL employs over 10 individuals.


Recently, HBL discovered that it had experienced a data breach in which sensitive personal identifiable information in its systems may have been accessed and acquired. Through its investigation, HBL determined that an unauthorized actor may have accessed this sensitive information on or around November 30, 2023. On April 16, 2024, HBL began notifying individuals whose information may have been impacted. The type of information potentially exposed includes:

  • Name
  • Social Security number
  • Driver’s license number
  • Tax identity protection PINs

If you received a breach notification letter from HBL CPAs, P.C.:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or sam@turkestrauss.com.

If you were impacted by the HBL data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by HBL CPAs, P.C.;
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: