KerberRose S.C., an accounting and wealth management firm, experienced an email account compromise beginning on April 29, 2026. The company discovered the unauthorized access on May 1, 2026, and began notifying affected individuals by May 29, 2026.
The breach affected 27,076 individuals, with exposed data potentially including names, Social Security numbers, bank/financial account information, and possibly tax or other personal records. There is no indication medical data was involved. This appears to be an internal incident at KerberRose, not a breach of a third-party vendor.
Details can continue to emerge as investigations progress, and notifications may be delayed as specific impacts are confirmed.