Data breach

Overview

Tax professionals, business owners and employers are frequent targets of scammers and identity thieves who want to steal information to file fraudulent returns and steal refunds. If you believe your data has been compromised, notify us immediately.

How to recognize a data breach

A data breach may have occurred if:

  • Your software account is compromised
  • Your HR or payroll systems are compromised
  • You click on a fake (phishing) email
  • Your device or paper files with customer data are lost or stolen
  • Your computer systems are compromised
  • You discover malware installed on your computer systems
  • An employee misuses data

Report a data breach

ftbdatabreach@ftb.ca.gov

What to include:

Businesses should provide the following:

  • Reporting individual’s name and title
  • Name of business
  • FEIN/SEIN
  • Number of employees affected
  • Nature of the data breach
  • Contact information

Tax professionals should provide the following:

  • Tax professional’s name and title
  • Name of business
  • PTIN/EFIN
  • Number of clients affected
  • Do you have a MyFTB account
  • When was your last log in
  • Contact information

Do not send attachments, embedded links, or personal information in your email. If we need more information, we will send you a secure request.

We will respond within 48 hours. (Except on weekends and State holidays.)

How to protect your data

Review these best practices to help protect your data:

Monitor your accounts with the IRS. The IRS posts the number of returns filed with your Electronic Filing Identification (EFIN) and Preparer Tax Identification Number (PTIN) weekly. If there are discrepancies in your records and what the IRS reports, notify us and the IRS immediately.

  • Log in to your IRS e-services account and access your EFIN application and select EFIN Status
  • Log in to your PTIN account and select View Returns filed by PTIN
  • Always verify the sender of an email before responding or clicking on links
  • Use strong passwords
  • Avoid using the same password across different accounts
  • Protect your passwords and sensitive data
  • Monitor your MyFTB account regularly

Report a data breach to other agencies

Government agencies

Last updated: 03/02/2026