Mercadien, P.C. CPAs
Oct 2026 · Graded Verified · Financial Services · Government record
Incident summary
Mercadien, P.C. CPAsOct 2026
Not yet quantified
VVerifiedBetween September and November 2025, intruders reached Mercadien's network and the Box.com storage where the auditor kept bank and credit union customers' Social Security numbers, ID numbers, account details, passwords, and IRS PINs, over 400,000 people's worth by the source's count. The source does not say how they got in. The banks' own networks were never touched; their auditors' file share had quietly become their perimeter. Orrstown Bank waited over six months to be told. At least 7 other financial institutions were impacted by this incident.
Financial Services
California AG breach notification
About this record
This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.