Everyone knows that data breaches are increasing exponentially. This is particularly true for tax and accounting firms of all sizes, including small and medium firms. There are specific tangible measures that every firm should have in place in order to reduce the risks of data breaches. There also are specific tangible steps that every firm should follow after a data breach. We will discuss these various measures to be undertaken before and after a breach in order to address and attempt to reduce prospective risks and damages.