Chek Tan and Company, LLP Listed by radar Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Ransomware groups continue to target professional services firms that hold concentrated stores of financial and personal records, listing victims on leak sites as leverage even when independent confirmation remains limited. In this climate, the appearance of an accounting practice on such a site raises immediate questions for clients and partners about what may have been taken and how far the exposure extends.

On 8 October 2025, the ransomware group radar listed Chek Tan and Company, LLP, a San Francisco firm that provides accounting, audits, management consulting, IRS representation and tax management services. Public detail is limited: the number of people affected is unknown, and the only description of the material is that internal files were allegedly exfiltrated in a ransomware attack. The listing itself is a claim by the group and has not been independently verified in the available record.

Breaking down the breach

According to the reported facts, Chek Tan and Company, LLP was listed by the radar ransomware group on 8 October 2025. The group asserts that internal files were exfiltrated during a ransomware attack. No further technical detail—such as the initial access method, the duration of any intrusion, the volume of data removed, or any ransom demand—has been disclosed. The number of individuals potentially affected remains unknown. Because the sole public source is the group’s own leak-site claim, the incident should be treated as an unverified allegation until additional confirmation appears.

Who is radar?

Radar is a ransomware operation that follows the now-common double-extortion model: encrypt systems, exfiltrate data, and threaten public release if payment is not made. Like other groups of this type, it maintains a leak site on which it posts victim names and, in some cases, sample files to increase pressure. Public reporting on radar has described it as opportunistic rather than highly selective, often focusing on mid-sized organisations whose data holdings include financial, legal or personal records. The group’s listing of Chek Tan and Company, LLP is presented solely as its own claim; no independent verification of the intrusion or the contents of any stolen archive has been supplied in the facts available here.

Chek Tan and Company, LLP and its sector

Chek Tan and Company, LLP is an accounting and professional-services firm based in San Francisco, California. Its advertised offerings include accounting, audits, management consulting, IRS representation and tax management. Firms of this kind routinely handle client tax returns, financial statements, payroll data, correspondence with revenue authorities, and related personal identifiers. Because such practices sit at the intersection of business finance and individual tax compliance, a successful intrusion can place both corporate and personal information at risk. The sector has seen repeated ransomware attention precisely because the data are both sensitive and difficult to replace quickly.

The information in question

The only description provided is that internal files were allegedly exfiltrated. Exact data types, file counts and whether any client or employee records were included remain undisclosed. Organisations that perform accounting, audit and tax work typically retain documents containing names, addresses, Social Security or taxpayer identification numbers, bank-account details, income figures and correspondence with tax authorities. None of these categories has been confirmed as present in the material radar claims to hold; they are simply the kinds of records such a firm would ordinarily possess. Until more precise inventories surface, the precise contents of any stolen archive stay unconfirmed.

Why it matters

For individuals whose records may have been among the internal files, the practical risks include identity theft, fraudulent tax filings, and targeted phishing that references real financial details. For the firm itself, the consequences can include regulatory notification duties, client attrition, and the operational cost of forensic investigation and system recovery. Even when the scale is unknown, the mere claim of exfiltration creates uncertainty that clients and partners must manage. Because accounting data often remain useful to criminals for years, the potential exposure window is longer than a single news cycle.

If your data was in this claimed breach

If you are a client, employee or partner of Chek Tan and Company, LLP, treat the listing as a prompt for caution rather than confirmed compromise. Practical first steps include:

• Monitor tax transcripts and credit reports for unexpected activity.
• Enable multi-factor authentication on financial and email accounts.
• Be alert to phishing messages that reference tax or accounting matters.
• Contact the firm directly through known channels for any official guidance it may issue.
• Run a free exposure scan of your email address to check whether your information has already appeared in other known breach data sets.

Public detail remains limited; further clarity will depend on any statements the firm or independent investigators later release.

AICompiled with AI assistance from public sources and published under our editorial standards.