DataBreaches.Net

Menu
  • About
  • Breach Notification Laws
  • Privacy Policy
  • Transparency Report
Menu

Abandoned Jackson Hewitt tax office’s returns put customers at risk

Posted on November 6, 2011 by Dissent

Kathleen Pender reports:

A Bay Area woman named Kara got an upsetting call the morning of Oct. 22.

The caller said she had found Kara’s 2007 tax return lying in a pile with hundreds of others on the ground in front of an abandoned Jackson Hewitt tax preparation office at 1734 Divisadero St. in San Francisco.

The tax returns were damp, meaning they had been out at least overnight.

Read more on the San Francisco Chronicle.

There are some interesting aspects to this incident. First, the owner of the building, unable to reach the evicted tenant who was actually responsible for the files, called a shredding company. For that thoughtfulness and responsible behavior, she should be commended. Unfortunately, however, when the company did not show up on time, she took their suggestion to leave bags outside, explaining that she didn’t know what was in them. I do not view her as having any responsibility for those returns, but it was an unfortunate decision.

The real estate broker also took steps to secure the records once he was made aware of the breach. The only parties that do not seem to be taking this seriously enough or taking enough responsibility are the people who actually owned or managed the franchise and Jackson Hewitt itself:

Mayrand confirmed that he was evicted from his former office and moved out Sept. 10. He said he left the boxes and bags behind because “they were so heavy I couldn’t lift them.” He said he “edited” his files and that “every record (left behind) was over four years old.”  (So leaving people’s Social Security numbers and dates of birth on recrods over four years old doesn’t pose a risk? – Dissent)

Mayrand said his name was on the lease at the old office but that he only manages the franchise, which is owned by another man, whose identity could not be verified.

Mayrand said the tax returns “shouldn’t have been out there,” but he didn’t feel responsible for them. “As far as I was concerned they were properly disposed of.”

If Mayrand truly felt that the tax returns were properly disposed of, Jackson Hewitt either has not been clear enough in its franchise contracts or is not auditing and educating its franchisees sufficiently because leaving records behind is not “properly disposed of.”

This is not the first breach involving a Jackson Hewitt franchise. I have reported several of them over the years on my blogs. Some included accidents like returns blowing off a truck on their way to disposal or an employee accidentally mixing returns with store coupons that were sent out. But this breach, like the one in October 2010 that involved improper dumping, should concern customers, Jackson Hewitt, and a Congress that has failed to give us a law protecting paper records with sensitive information.


Related:

  • UN Cybercrime Convention to be signed in Hanoi to tackle global offences
  • ModMed revealed they were victims of a cyberattack in July. Then some data showed up for sale.
  • Toys “R” Us Canada customers notified of breach of personal information
  • Gatineau gymnastics centre warns members of possible data breach
  • Protected health information of 462,000 members of Blue Cross Blue Shield of Montana involved in Conduent data breach
  • TX: Kaufman County Faces Cybersecurity Attack: Courthouse Computer Operations Disrupted
Category: Breach IncidentsBusiness SectorExposureOf NotePaperU.S.

Post navigation

← MN: Woman Charged With Stealing $6K From Credit Cards of Apple Valley Store Customers
Ca: Nearly 2,700 tax files downloaded on missing laptop →

2 thoughts on “Abandoned Jackson Hewitt tax office’s returns put customers at risk”

  1. Craig says:
    November 8, 2011 at 3:54 pm

    That is scary stuff. I would hate to be one of the customers that had their tax files just laying around for anyone to take. The best advice would be to do some research and choose a solid trustworthy tax preparer that has a track record in the community. A BBB A+ rating would be important to me.

  2. garykva says:
    November 9, 2011 at 12:03 pm

    Thats why I do not use a service like this – you get what you pay for. As for the records, if they knew of them, and were unable to pick them up, whats wrong with calling some one to give you a hand? There is no good excuse. The problem with this world these last few generations as there is lack of compassion and detail. They have their heads into electronic devices and lose their vision of common sense and commitment in my opinion.

    Do whats right. Can’t pick up the items? Call the cops. drag them to the curbside and get some other containers, and break into smaller amounts. If the owner of the building evicted the individulas, knowing it was a tax service, the ignorance or assumption of materials being taken care of means one thing, they are thinking of only one thing – the almighty dollar.

Comments are closed.

Now more than ever

"Stand with Ukraine:" above raised hands. The illustration is in blue and yellow, the colors of Ukraine's flag.

Search

Browse by Categories

Recent Posts

  • District of Massachusetts Allows Higher-Ed Student Data Breach Claims to Survive
  • End of the game for cybercrime infrastructure: 1025 servers taken down
  • Doctor Alliance Data Breach: 353GB of Patient Files Allegedly Compromised, Ransom Demanded
  • St. Thomas Brushed Off Red Flags Before Dark-Web Data Dump Rocks Houston
  • A Wiltshire police breach posed possible safety concerns for violent crime victims as well as prison officers
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Almost two years later, Alpha Omega Winery notifies those affected by a data breach.
  • Court of Appeal reaffirms MFSA liability in data leak case, orders regulator to shoulder costs
  • A jailed hacking kingpin reveals all about the gang that left a trail of destruction
  • Army gynecologist took secret videos of patients during intimate exams, lawsuit says

No, You Can’t Buy a Post or an Interview

This site does not accept sponsored posts or link-back arrangements. Inquiries about either are ignored.

And despite what some trolls may try to claim: DataBreaches has never accepted even one dime to interview or report on anyone. Nor will DataBreaches ever pay anyone for data or to interview them.

Want to Get Our RSS Feed?

Grab it here:

https://databreaches.net/feed/

RSS Recent Posts on PogoWasRight.org

  • As shoplifting surges, British retailers roll out ‘invasive’ facial recognition tools
  • Data broker Kochava agrees to change business practices to settle lawsuit
  • Amendment 13 is gamechanger on data security enforcement in Israel
  • Changes in the Rules for Disclosure for Substance Use Disorder Treatment Records: 42 CFR Part 2: What Changed, Why It Matters, and How It Aligns with HIPAAs
  • Always watching: How ICE’s plan to monitor social media 24/7 threatens privacy and civic participation

Have a News Tip?

Email: Tips[at]DataBreaches.net

Signal: +1 516-776-7756

Contact Me

Email: info[at]databreaches.net
Security Issue: security[at]databreaches.net
Mastodon: Infosec.Exchange/@PogoWasRight
Signal: +1 516-776-7756
DMCA Concern: dmca[at]databreaches.net
© 2009 – 2025 DataBreaches.net and DataBreaches LLC. All rights reserved.