Pacific Accounting & Business Services Data Breach: A Hacker Claim, No Lawsuit
Reference Guide
Pacific Accounting & Business Services (PABS) is an outsourced accounting, bookkeeping, tax and payroll firm with a Texas office in Irving. On September 17, 2026 a ransomware group listed it as a victim on its leak site. As of October 18, 2026 the company has not publicly confirmed a breach, we found no entry in California’s attorney general breach list, and no lawsuit is on file. There is no settlement and no claim form.
Questions about this case?
AI Legal Assistant · free · answers in seconds · general information, not legal advice
Independent information service: Settlement Insight is not the settlement administrator, is not affiliated with or endorsed by the company named above, and is not a law firm. Submitting this form does not file a claim — it shares your information with our participating legal intake partners, who may contact you about your options.
What Has Actually Been Reported
Everything known so far comes from the attackers’ own claim, relayed by dark-web monitoring sites. Ransomware.live lists pacificabs.com as a victim of a group called Settra, discovered September 17, 2026, with the attack itself estimated at August 28, 2026. DeXpose reports that the group claimed it had accessed sensitive data and threatened to leak it unless negotiations began.
The group’s post names “Pacific Global Solutions / PABS / Atteign LLC” and refers to “40+ American businesses” before the preview cuts off. That wording matters: PABS works for other businesses and CPA firms, so if files were taken they may belong to those clients and their staff. It is still a claim, not a confirmed finding.
Breachsense, which logged the listing on September 18, 2026, gives the leak size as unknown. It separately found 30 company email accounts in older breaches and says none of this is necessarily connected to this attack.
Case details
No lawsuit has been filed that we could find. Our search of a local federal court-filings database (updated since October 10, 2026) returned no case naming Pacific Accounting & Business Services, PABS or Pacific Global Solutions. What does exist is a law-firm investigation page, published September 18, 2026, asking current and former PABS employees and employees of its clients to come forward. That is a search for plaintiffs, not a case.
Status: Unconfirmed Breach, No Case
The usual order of events is: the company finishes its investigation, mails notice letters, and files the required notices with state attorneys general. Lawsuits usually follow the letters. We found no entry for the company in California’s breach list, and no public company statement. The homepage on that date showed no incident notice.
Who Could Be Affected
Nobody has been told they are affected yet, because no notice letters have been reported. If the claim is accurate, the people at risk are less likely to be PABS’s own customers than the people whose records sit in client files: employees of the businesses and CPA firms PABS does bookkeeping, tax and payroll work for, plus PABS staff.
The practical test is your mail. A notice might arrive under PABS’s name or under the name of your employer or accountant. Keep any letter you get: it lists which of your details were involved and is your proof that you are affected.
Is There Any Money?
PABS Breach Claim Timeline
June 2, 2026 — Settra Appears
Ransomware.live records the first victim of the Settra group. It has posted many companies since.
August 28, 2026 — Estimated Attack Date
Ransomware.live estimates the attack on pacificabs.com happened on this date. The company has not confirmed a date.
September 17, 2026 — Leak-Site Listing
Settra lists the firm, naming Pacific Global Solutions, PABS and Atteign LLC, and threatens to leak data unless negotiations start.
September 18, 2026 — Monitors and Lawyers React
Breachsense logs the listing with an unknown leak size. A law-firm investigation page asking for affected people goes up the same day.
October 11, 2026 — Credential Check
Breachsense updates its credential data for the domain and says older leaked logins are not necessarily tied to the attack.
October 18, 2026 — No Notice, No Case
No company statement, no entry in California’s attorney general breach list, no lawsuit, no settlement and no claim form.
Three Things to Watch For
A hacker claim with no official notice yet leaves room for imposters:
Fake “PABS breach” emails asking you to verify payroll details
PABS does payroll and tax work, so a message that seems to come from your employer’s accountant is believable. Don’t send bank details, W-2 data or your Social Security number in reply to any breach email. Call your employer’s HR or payroll contact on a number you already have.
“Claim your PABS settlement” pages
No settlement exists as of October 18, 2026. A form asking for your Social Security number to “register” for one is collecting data, not filing a claim.
Offers to delete your leaked files
Leak-site posts attract people who promise to get your data removed for a fee. Nobody can reliably pull data off a criminal leak site. Freezing your credit is free and does more.
PABS Data Breach — Questions People Actually Ask
Short answers to the questions people ask most about this case.
Is there a Pacific Accounting & Business Services data breach lawsuit?
Not as of October 18, 2026. We found no case naming the firm in our federal court-filings database, which has been updated since October 10, 2026. The only legal activity is a law-firm investigation page from September 18, 2026 looking for affected people.
Was Pacific Accounting & Business Services actually breached?
It is not confirmed. The ransomware group Settra claimed the firm on its leak site on September 17, 2026, and monitoring sites reported that claim. As of October 18, 2026 we found no company statement and no entry in California’s attorney general breach list.
What data was exposed?
Unknown. Breachsense lists the leak size as unknown, and the investigation page lists impacted data as to be determined. The group’s post mentions “40+ American businesses”, which suggests client files, but that is the attackers’ description and has not been verified.
Who is PABS?
Pacific Accounting & Business Services is an outsourced accounting firm with offices in Irving, Texas and Irvine, California, plus operations in Australia and India. It says it has more than 1,400 accountants and over 6,000 clients, and provides bookkeeping, tax, CFO, payroll and audit support to small businesses and CPA firms.
What is the typical payout per person for a data breach settlement?
It depends on the size of the fund, the number of people in the class, and how many of them file claims. Nothing is payable here because no case exists. Our data breach settlement calculator shows how those factors usually work out.
Can we sue companies for data breaches?
Yes. People affected by breaches often file class actions, usually after notice letters go out. Here, lawyers are still looking for plaintiffs and nothing has been filed. You do not have to sign up anywhere to be included in a class if one is later certified or settled.
I never dealt with PABS. Why would I be affected?
PABS does bookkeeping, tax and payroll work for other businesses and CPA firms. If your employer or accountant used it, your records could be in its systems without you knowing. Any notice may come under your employer’s or accountant’s name.
What is worth doing right now?
Freeze your credit at all three bureaus; it is free and you can undo it. If you think your tax records could be involved, request an IRS Identity Protection PIN. Keep any breach letter you receive, and treat unexpected emails about payroll or tax changes with suspicion.
About This Information
Editorially Reviewed — Content reviewed for accuracy using published legal research, government data, and verified court records. See our methodology. Reviewed by Leonard Goldberg, Editor · Last updated - $236 billion in real payouts analyzed · See what we found
This page is for general information only and is not legal advice. Lawsuit status, eligibility, and compensation can change. Settlement Insight is not a law firm and does not represent any party. Consult a licensed attorney about your specific situation.
Related Consumer Brand Lawsuits
Other cases and free tools — not about this case.
Similar cases we track
- Better Accounting Solutions BreachAnother accounting-firm hack claim with no lawsuit on file
- Open Class Action SettlementsSettlements taking claims right now, with deadlines
- Data Breach Settlement CalculatorEstimate what a breach settlement could pay per person
- Settlement Payout CalculatorHow fund size and claim rates set individual payments