I’ve used H&R and TurboTax. Very little difference in the two.
Also, for what it’s worth, it’s most likely that Intuit (TurboTax) itself wasn’t actually breached back in 2015. Email accounts of Intuit customers were breached and the information from the email accounts was used to login, file and claim peoples’ tax refunds.
Just another reminder to never use the same password for your email address as any other password that you have, and to change them frequently.
Source: My job is catching people using stolen payment credentials online and I see account takeovers every day.