Suspected scam; looks like Intuit's account database has been hacked

Thank you for posting here in the Community, Bill.

I can provide you with additional details regarding the safety and security of your account.

We understand that the safety and security of your data is of utmost importance, and we want to assure you that Intuit takes this responsibility very seriously. We have implemented various measures to protect your data, such as encryption and advanced security protocols. Rest assured that your data is safe with us, and we'll continue to prioritize its security. Refer to this article for more information about how we protect your data: Privacy and Security. It'll tell you more about how we keep your data secure, spot when scammers spot you, and our list of recommendations.

Here's an article that will guide you in avoiding customer support scams: Identify suspicious activity, phishing scams, and potential fraud. You can scroll down to the Stay aware: Check out the latest information from Intuit section and then proceed to the What can I do to protect myself from a phishing attack? dropdown to find the steps on how to file a report about a phishing attack. 

If you ever need to check your subscription details, log in to your account go to the Gear icon, and then proceed to the Subscriptions and billing. You'll be able to view your payment history for the last six months. Here's how you can manage billing, payment, and subscription info in QuickBooks Online. It'll help you update your card details, change your subscription plan, or check your billing history without any hassle. 

In the meantime, here's how you can switch to annual billing if you have a payroll subscription for the payroll base fee. 

Keep me posted if you need further information about keeping your account safe and secure by leaving a reply below. The Community is always here to assist. Stay safe, and have a wonderful day!

Thanks but I am not so sure about "Rest assured that your data is safe with us," which to me sounds like a boilerplate reply that does not address the particulars of this situation. To repeat, there is enough specificity about this purported scam to suggest a data breach. I would like an investigation and to know the result of that investigation, not just some boilerplate response.

Thanks,

- Bill. 

Hi there, @billr1.

I understand that you are concerned about your data and information safety within Intuit. As a trusted service provider, we prioritize the security and privacy of our users. If you'd like an investigation about this, please don't hesitate to contact our live support, as they will assist you with this concern and take proper action.

Here's how:

1. Head to this link: Contact Us.
2. Select QuickBooks Online product and click Continue.
3. Select Contact Us and choose a way to connect with us:

• Start a chat with a support expert.
• Get a callback from the next available expert.

I want to provide you with these articles for your future reference:

• Contact QuickBooks products and services Support.
• What can we help you with?

Please let me know if you have any additional concerns about Intuit Security. We'll do our best to help and provide excellent service.

Thanks. I have already sent an email with the details to [email address removed], following the instructions of a forum post on a similar topic. I trust that this will be more efficient than going through customer support chat, where it takes a superhuman effort to reach a human being.

Best,

- Bill. 

Hi,

Today, we received a similar set of scam emails, saying that our account was locked and that we needed to sign up for a minimum of a year's subscription.

The really concerning part is that the scammers (domain intuitaccountingservices.com) had the correct:

Account number

License number

Product number (which we only updated a few days ago)

Last 4 digits of the credit card

I am not sure how someone would have gotten all this from us; seems more like a data breach at Intuit.

Any updates on this, or steps to take to either report or get information on such a breach?

Steve W.

I am well aware of how data and information safety is beneficial to your business, @billr1. No worries. I can provide information concerning the safety and security of your account in QuickBooks Online (QBO).

The domains you've provided sound realistic at first glance. However, none of these emails belong to Intuit. Moreover, we can check if the emails you've received are suspicious, phishing scams, or potential fraud. Refer to this article and learn how to recognize official Intuit correspondence and websites: Identify suspicious activity, phishing scams, and potential fraud.

Furthermore, I've also added this article for you to learn how to add Intuit's service email addresses to your email's allow list: Receive important email messages from Intuit.

In addition, I've included this article for your reference and to learn how to update or change your email address, user ID, password, and other information for your QuickBooks, TurboTax, or Credit Karma products: Update or change your Intuit Account sign-in information. 

This thread is always open should you need additional assistance managing your credentials. I'll keep an eye out for it. Stay safe.