Sax LLP, a New Jersey accounting, tax and advisory firm, says approximately 228,876 people may be affected by a cybersecurity incident. Unauthorized parties may have viewed or acquired files containing names, dates of birth, Social Security numbers and government-identification information.
Sax detected suspicious activity on August 7, 2024, but began notifying affected individuals in December 2025. The firm says it found no evidence of actual or attempted misuse, although that does not rule out future identity theft.
As an Amazon Associate I earn from qualifying purchases.
What happened in the Sax breach?
According to Sax’s Maine filing and its consumer notice, the sequence was:
- The Maine filing lists July 30, 2024, as the breach date.
- Sax was alerted to suspicious activity on August 7, 2024.
- The firm secured its network and began a forensic investigation with outside cybersecurity specialists.
- Investigators determined that some files may have been viewed or acquired without authorization.
- A third party reviewed potentially affected files to identify the people whose information was present.
- Sax says that review was completed on or about December 1, 2025.
- Consumer notifications began in December 2025. The Maine record lists December 16 as the notification start date and December 22 as the filing date.
The official filing classifies the incident as an external system breach or hacking. The available sources do not establish that it was ransomware, that a ransom was paid, or that a ransomware group was involved.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
How many people were affected?
The exact figure is 228,876 individuals, not precisely 220,000. The 220,000 figure is a rounded headline number. The Maine filing says 244 Maine residents were affected.
What information may have been exposed?
The information varied by person. Sax did not say that every affected individual had every data element exposed.
| Information | Potential risk |
|---|---|
| Name and date of birth | Impersonation and identity-verification scams |
| Social Security number | New-account fraud, tax fraud and employment-related identity theft |
| Driver’s-license or state-identification number | Impersonation and fraudulent account-opening attempts |
| Passport number | Identity-document and travel-related fraud concerns |
The notice says the affected information may have included these items. Check your individual letter to determine which information Sax associated with your record.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Why did notification take more than a year?
Sax attributes the delay to the forensic investigation, the review of potentially affected files and efforts to locate accurate contact information for affected people. Detecting suspicious activity is not necessarily the same as knowing whose information was involved or what data was accessible.
That explanation distinguishes August 7, 2024—the date Sax says it detected suspicious activity—from December 1, 2025, which the consumer notice describes as the completion of the review and notification preparation. It should not be read as the date the intrusion began.
A lengthy investigation can delay notification, but the length of this gap is still a legitimate point for scrutiny. The available sources do not establish that law enforcement requested a delay, that Sax violated a particular state notification law or that a specific technical obstacle caused the delay.
Rank #3
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
What protection is Sax offering?
Eligible recipients were offered 12 months of complimentary Epiq services, including:
- Credit monitoring
- Dark-web monitoring
- Credit protection
- Identity restoration
- Lost-wallet assistance
Use the activation code and deadline in your individual notice. The notice identifies Privacy ID Solutions and lists 866-675-2006 as the enrollment phone number, but person-specific instructions should take priority. Eligibility may depend on factors such as age, an established U.S. credit file, a Social Security number and a U.S. residential address.
Credit monitoring can alert you to some changes after they occur; it does not prevent someone from applying for credit in your name.
Rank #4
- POWERFUL SECURITY KEY: The Security Key NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key NFC via USB-A and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What affected people should do now
- Verify the notice. Use contact details in the letter or official state filing. Do not trust unsolicited callers, emails or law firms asking for payment or sensitive information.
- Enroll in Epiq’s free service. Complete enrollment before the deadline stated in your notice and save confirmation.
- Consider a credit freeze. If your Social Security number or government-ID information may have been involved, freeze your files with Equifax, Experian and TransUnion. A freeze is generally stronger protection against new-account fraud, though you may need to temporarily lift it when applying for credit, housing, utilities or some jobs.
- Review all three credit reports. Look for unfamiliar accounts, inquiries, addresses and collection activity.
- Enable account alerts. Turn on notifications for bank, credit-card, email, payroll and tax accounts.
- Expect targeted phishing. Do not provide passwords or full Social Security numbers during inbound calls. Type known website addresses or use official apps rather than clicking unexpected links.
- Address document exposure. If your notice identifies a driver’s-license or state-ID number, contact the issuing agency about replacement or reissuance. If it identifies a passport number, use official U.S. Department of State passport guidance.
- Keep records. Save the notice and document suspicious calls, messages, expenses, reports and other losses.
- Report confirmed identity theft. Start at IdentityTheft.gov and follow the relevant law-enforcement and account-provider procedures.
What if you lost the letter or missed enrollment?
Contact the assistance number printed in your notice and keep evidence of your attempted enrollment. Do not assume a late activation code will be accepted. If you did not receive a notice but believe Sax may have held your information, contact Sax through a verified channel rather than responding to an unsolicited message.
What does “no evidence of misuse” mean?
Sax’s statement means that, as of the notice, it had not identified actual or attempted misuse. It does not prove that information was never copied, retained, exchanged or sold, and it cannot guarantee that misuse will not occur later. Continue monitoring accounts even after the 12-month service ends.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWhat about lawsuits or regulatory action?
Some law firms have announced investigations into potential claims, including announcements from Edelson Lechtzin and Levi & Korsinsky. Those are attorney announcements, not proof that a lawsuit was filed, certified as a class action or successful.
Best Value
- The information below is per-pack only
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
A breach notification by itself does not establish negligence or liability. Anyone considering legal action should preserve the notice and evidence of losses, then consult a qualified attorney independently.
Frequently Asked Questions
Was the Sax breach in 2024 or 2025?
Sax detected suspicious activity on August 7, 2024. December 1, 2025 refers to the reported completion of the review and notification preparation, not necessarily the start of the intrusion.
Was this confirmed to be ransomware?
No. The official filing describes an external system breach or hacking. The available sources do not establish that ransomware was involved.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsDoes the free Epiq service cover children?
Do not assume it does. The notice’s eligibility language refers to adults with established U.S. credit and a Social Security number; parents should contact the bureaus about child-identity procedures.
Can I enroll without an activation code?
The notice says enrollment requires an activation code. If yours is missing or expired, contact the assistance number in your individual letter and document the attempt.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
