Baker Tilly notifies clients of data breach at third-party provider

Baker Tilly's clients suffered a data breach not because of a failure within Baker Tilly itself, but because a third-party platform they relied on was compromised, exposing Social Security numbers, names, and addresses for over 10,000 individuals. This incident highlights the critical risk that third-party vendors introduce into an organization's data security posture—your security is only as strong as the weakest link in your supply chain. Organizations that entrust sensitive personal data to external providers must rigorously assess, monitor, and contractually obligate those vendors to maintain adequate security controls. Failing to do so creates liability, regulatory exposure, and reputational harm even when the breach originates entirely outside your own systems.