Adams Samartino and Co PC data breach investigation

Investigation notes

Adams Samartino and Co PC operates as a professional accounting, tax preparation, and financial advisory firm based in Nebraska. Because of the core nature of their services, the firm routinely collects, processes, and stores an extensive volume of highly sensitive financial and personally identifiable information. Clients trust firms like Adams Samartino and Co PC with sensitive documents including comprehensive tax returns, financial statements, wage and compensation details, and direct deposit information necessary for corporate payroll and individual tax compliance. This concentration of lucrative and sensitive financial data makes accounting and professional services firms prime targets for cybercriminals seeking to monetize stolen identities. in 2025, Adams Samartino and Co PC formally reported a significant cybersecurity incident to the Nebraska Attorney General. While the precise mechanics of the breach are still under investigation, incidents impacting firms of this professional caliber typically involve unauthorized access to internal document repositories, compromise of employee credentials, or sophisticated ransomware attacks deployed against legacy database systems. Attackers frequently exploit vulnerabilities in third-party software, remote access portals, or email networks to gain a foothold within the firm's perimeter, remaining undetected while siphoning vast quantities of confidential client data offsite. The exposure resulting from this security incident involves categories of data that carry severe, long-term risks for affected individuals. Compromised information likely includes full legal names, Social Security numbers, dates of birth, detailed tax return documents, banking routing and account numbers, and wage histories. When cybercriminals obtain Social Security numbers and detailed tax records, victims face an immediate and elevated risk of tax fraud—where bad actors file fraudulent returns to intercept refunds—as well as comprehensive identity theft, unauthorized credit applications, and financial account takeover. Professional services firms like Adams Samartino and Co PC have a strict legal duty under federal and Nebraska state law to implement and maintain robust administrative, technical, and physical safeguards to protect sensitive client data. Under state consumer protection statutes and applicable industry regulatory standards, accounting firms are obligated to encrypt sensitive data at rest and in transit, maintain active intrusion detection systems, and train personnel on emerging threat vectors. The occurrence of this data breach strongly suggests a systemic failure to uphold these standard security obligations, leaving confidential client records vulnerable to foreseeable cyber threats. Receiving a data breach notification letter from Adams Samartino and Co PC serves as official legal confirmation that your confidential information was compromised due to inadequate corporate security practices. Under Nebraska law, affected individuals possess the legal standing to participate in class action litigation aimed at holding the firm accountable for its security lapses. Importantly, you do not need to show proof of actual financial theft or identity fraud to join a class action lawsuit; the increased risk of future harm and the time spent monitoring accounts are sufficient grounds. Our firm handles these complex data privacy cases on a contingency fee basis, meaning you pay absolutely nothing out of pocket unless we successfully recover compensation on your behalf.