12 Aug 2026 · 8 min
The Tax File Nobody Told You Was Public
Attackers spend weeks inside an accounting firm's email before a single message asks for anything. Here is what they extract during that window (tax returns, financial statements, payroll data), how they extract it, and why the industry's 'MFA and backups' response misses the entire attack.
Accounting firms