Haynie & Company PC Listed by SilentRansomGroup Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

People who have used Haynie & Company PC for tax preparation, accounting, or related financial services may have personal and financial records sitting among the internal files that a ransomware group claims to have taken. When a firm that handles tax returns and client financial data is listed on a leak site, the practical risk is that sensitive documents could be published, sold, or used for fraud, even if the exact number of people involved remains unknown.

Public reporting on 13 December 2024 stated that Haynie & Company PC had been listed by the SilentRansomGroup ransomware operation, which asserted that internal files had been exfiltrated. No confirmed count of affected individuals has been released, and the precise contents of the files have not been independently verified.

Inside the incident

According to the available public record, SilentRansomGroup listed Haynie & Company PC on its leak site and claimed to have stolen internal files in a ransomware attack. The listing was reported on 13 December 2024. The group’s own summary accompanying the claim included a revenue figure of $57.5 million for the firm and noted 165 total downloads of the material it said it held. No further technical details—such as the initial access method, the duration of the intrusion, or whether encryption was also deployed—have been disclosed in the public reporting. The number of people whose information may be involved is listed as unknown. Because the listing originates from the threat actor, it remains an unverified claim unless and until the firm or independent investigators state the details.

Who is SilentRansomGroup?

SilentRansomGroup is a ransomware operation that follows the now-common double-extortion model: operators claim to steal data before or instead of encrypting systems, then threaten to publish or sell the material if a ransom is not paid. The group maintains a leak site where it posts victim names, sometimes with sample files or download counters, to pressure organisations. Public tracking of the group shows it has targeted a range of mid-sized professional-services and commercial firms rather than only large enterprises. Its listings typically assert that internal documents, client records, or operational files have been taken; those assertions are claims made by the actors themselves and are not independently confirmed at the moment of publication. In this case, the group claims Haynie & Company PC’s internal files were exfiltrated and has attached a download count of 165 to the listing.

Who is Haynie & Company PC?

Haynie & Company PC is a professional-services firm founded in 1960 and headquartered in Salt Lake City. Public descriptions of the firm state that it offers tax services and related accounting work. Firms of this type routinely handle client tax returns, financial statements, payroll data, Social Security numbers, bank-account details, and other personally identifiable and financially sensitive information. The group’s listing also cited a revenue figure of $57.5 million. Because the firm’s core business involves preparing and storing documents that contain highly sensitive personal and financial data, any confirmed exfiltration of internal files would place both clients and the firm itself at material risk of identity theft, tax fraud, and regulatory scrutiny.

What data was at risk

The only data type named in the public reporting is “internal files” said to have been exfiltrated in a ransomware attack. No inventory of specific file categories, client records, or data elements has been released. Accounting and tax firms typically hold tax returns, supporting financial documents, identification numbers, contact information, and correspondence with clients and tax authorities. Whether any of those categories were among the files claimed by SilentRansomGroup has not been confirmed. The exact contents therefore remain unconfirmed, and the number of people potentially affected is unknown.

What's at stake

For individuals whose information may have been among the internal files, the concrete risks include identity theft, fraudulent tax filings, unauthorised access to bank or investment accounts, and targeted phishing that uses real personal details to appear legitimate. Even if the files are never published, possession by criminals creates a standing risk that the data could be sold or reused later. For the firm, the stakes include potential regulatory notification obligations, client trust erosion, possible civil claims, and the operational cost of investigation and remediation. Because the scale of the claimed exfiltration and the precise data types remain undisclosed, the full extent of exposure cannot yet be measured.

What to do if you're exposed

If you have been a client of Haynie & Company PC or have reason to believe your information was held by the firm, treat the situation as a potential exposure until more definitive information is released. Practical first steps include:

• Monitor tax transcripts and IRS accounts for unexpected filings or changes.
• Place a fraud alert or credit freeze with the major credit bureaus and review credit reports regularly.
• Watch bank, investment, and credit-card statements for unauthorised activity.
• Be alert to phishing or phone calls that reference real personal or tax details.
• Retain any breach notices the firm may later issue and follow the specific guidance they contain.

Readers can also run a free exposure scan of their email address to check whether that address has already appeared in known breach data sets. Doing so provides one additional data point while official details about this incident remain limited.

AICompiled with AI assistance from public sources and published under our editorial standards.