Wing Financial Services Data Breach

NOTICE: If you received a NOTICE OF DATA BREACH letter from Wing Financial Services, LLC, contact the Arnold Law Firm at 916-777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.

On or about December 1, 2022, Wing Financial Services, LLC (“Wing Financial”) sent a Notice of Data Breach Letter (“Breach Letter”) to its customers, corporate and individuals, informing them their personally identifiable information (“PII”) was exposed through an “unauthorized party” that “certain client records appeared to have been exposed to an unaffiliated third-party website by an unauthorized user.” (“data breach”).

According to the Breach Letter, hackers first gained access to Wing Financial’s systems on or about August 7, 2022, or even as early as September 2020 through January 2022. The PII stolen by the hackers included, but was not limited to, name, address, date of birth, unique biometric information, Social Security numbers, driver’s license numbers or other state identification card numbers, individual tax identification numbers, passport numbers or other government ID, tax identification numbers, financial account numbers with access codes, payment card numbers, health insurance policy numbers, and medical treatment/history. The same information may include your spouse’s or partner’s or dependents’ personal information.

Although Wing Financial learned of the data breach only “recently,” it still waited months to provide actual notice to victims despite knowing that hackers accessed its systems. In the Breach Letter, Wing Financial informed victims it found “these records to one Wing Financial server.”

Wing Financial is an independently owned and operated Jackson Hewitt franchise located in Bartlesville, Oklahoma. Wing Financial provides tax preparation services including individuals and those claimed as dependents. If you received a Breach Letter from Wing Financial, you were impacted by the data breach.

Wing Financial has offered data breach victims 12 months of Cyberscout credit and identity monitoring, but the deadline for victims to enroll may be a short window.

WHAT INFORMATION IS INVOLVED?

According to Wing Financial, the following information was exposed:

• Name
• Address
• Date of birth
• Unique biometric information
• Social Security numbers
• Driver’s license numbers or other state identification card numbers
• Individual tax identification numbers
• Passport numbers or other government ID
• Tax identification numbers
• Financial account numbers with access codes
• Payment card numbers
• Health insurance policy numbers
• Medical treatment/history, and
• The same information may include your spouse’s, partner’s or dependent(s)’ personal information.

This information is called your Personally Identifiable Information (“PII”). It tells others about you and is considered part of your identity. Businesses are required to secure this information or risk facing statutory penalties, among other legal penalties. Stolen PII can be used by identity thieves to engage in fraudulent activity using your identity.

The best way to protect yourself after a data breach is to sign up for credit and identity protection services as soon as possible. California offers extra protections and legal rights to its residents through the California Consumer Privacy Act (“CCPA”).

NOTICE: If you received a NOTICE OF DATA BREACH letter from Wing Financial Services, LLC, contact the Arnold Law Firm at 916-777-7777 to discuss your legal options, or submit a confidential Case Evaluation form here.