H&N Tax, Inc

Summary

H&N Tax, Inc d/b/a CSA Tax experienced a disruption to its computer network and launched an investigation that engaged a third‑party computer forensic specialist. The investigation concluded that certain personal information, including names and Social Security numbers, was accessed without authorization. Subsequently, the company began sending notice letters to affected clients. Edelson Lechtzin LLP is investigating potential class action claims on behalf of individuals whose data may have been compromised.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

H&N Tax, Inc., operating under the name CSA Tax, provides tax preparation and planning services to individuals and small businesses throughout the year. On or about December 2, 2025, the company became aware of a disruption to its computer network that it identified as a potential data breach. In response, CSA Tax initiated an internal investigation and enlisted the assistance of a third‑party computer forensic specialist to examine the incident. The forensic investigation was concluded on January 22, 2026, and determined that certain personal information stored on the company’s network had been accessed without authorization. The data that may have been involved includes clients’ names combined with their Social Security numbers.

Following the completion of the investigation, CSA Tax began mailing notice letters to affected clients on February 20, 2026, informing them of the possible exposure of their personal information. Edelson Lechtzin LLP, a national class action law firm with offices in Pennsylvania and California, announced that it is investigating claims on behalf of CSA Tax clients whose data may have been compromised. The firm, headquartered in suburban Philadelphia, focuses its practice on data breach litigation as well as securities and investment fraud, antitrust violations, ERISA‑related employee benefit plans, wage theft, and consumer fraud. Edelson Lechtzin LLP is preparing to pursue a class action lawsuit to seek legal remedies for individuals whose sensitive personal data may have been exposed in the CSA Tax incident. The press release announcing the investigation includes the firm’s contact information and may be considered attorney advertising in certain jurisdictions.

The press release also provides the law firm’s address at 411 S. State Street, Suite N‑300, Newtown, PA 18940, and a phone number of 844‑696‑7492 extension 2, with an email address of medelson@edelson‑law.com and a website at www.edelson‑law.com. CSA Tax’s business description emphasizes its year‑round support for tax preparation and planning for both individual and small‑business clients. The timeline outlined in the release shows that the breach was discovered in early December 2025, the forensic investigation finished in late January 2026, and client notifications commenced in late February 2026. No further technical details about the breach’s origin, the specific systems affected, or the identity of any threat actors are disclosed in the source material.

Sources

Sources available to members: 1 source.