In October 2025, a criminal hacking group claimed it had exploited a Salesforce CRM and related plugins vulnerability in 39 organizations, including Google, Disney, and other major corporations. 1-800Accountant was also listed. Security is our first priority, and we choose best-in-class applications with leading security measures. On 10/10/2025, the hacking group and this threat were shut down by the US Government.
Our review confirms that the incident involved only basic business information, such as the business name and contact details (business address, zip code, state of incorporations etc.). Privacy laws indicate that for lost data to be damaging to individuals, it must be personal in nature and include one or more of: SSN, Driver's license number or other government ID number, Account number, Credit/debit card number in combo with a required security or access code or password, Medical info, Health insurance info, Biometric or genetic data. 1-800Accountant does not store this kind of data in our Salesforce instance.
As part of our commitment to our clients’ security, we are offering any client a complimentary one-year subscription to NordProtect identity-theft protection. Clients will be reimbursed by check within 14 days of processing. For details or to request this service, please get in touch with our support team here: https://1800accountant.com/support. To access to form, select More in the page menu, and then select Contact Support. When filling out the form, use 'Invoice and Payments' as the case reason.