Forrestall CPAs Data Breach Exposes Sensitive Personal and Financial Information
Forrestall CPAs, a full-service certified public accounting firm based in the Atlanta metro area, disclosed a data breach that occurred between December 22 and December 30, 2025, after an unauthorized individual accessed and exfiltrated sensitive files from its network. The compromised data included names, Social Security numbers, driver’s license and state ID numbers, financial account details, health insurance information, addresses, and dates of birth.
The firm began notifying affected individuals on August 7, 2026, following an investigation conducted with a cybersecurity firm. Legal professionals, including those affiliated with ClassAction.org, are examining the incident to determine whether a class action lawsuit can be filed on behalf of impacted parties. Such a lawsuit could seek compensation for privacy violations, financial losses, and other damages.
The breach has raised concerns about the security of client data entrusted to accounting firms, particularly given the breadth of sensitive information exposed. No details on the attack vector or the number of affected individuals have been publicly disclosed. The incident remains under review by legal and cybersecurity teams.
Source: https://www.classaction.org/data-breach-lawsuits/forrestall-cpas-august-2026
Forrestall CPAs LLC cybersecurity rating report: https://www.rankiteo.com/company/forrestall-cpas-llc
"id": "FOR1787432095",
"linkid": "forrestall-cpas-llc",
"type": "Breach",
"date": "12/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Accounting',
'location': 'Atlanta metro area',
'name': 'Forrestall CPAs',
'type': 'Certified Public Accounting Firm'}],
'customer_advisories': 'Notified affected individuals on August 7, 2026',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Driver’s license and state ID '
'numbers',
'Financial account details',
'Health insurance information',
'Addresses',
'Dates of birth']},
'date_detected': '2025-12-30',
'date_publicly_disclosed': '2026-08-07',
'description': 'Forrestall CPAs, a full-service certified public accounting '
'firm based in the Atlanta metro area, disclosed a data breach '
'that occurred between December 22 and December 30, 2025, '
'after an unauthorized individual accessed and exfiltrated '
'sensitive files from its network. The compromised data '
'included names, Social Security numbers, driver’s license and '
'state ID numbers, financial account details, health insurance '
'information, addresses, and dates of birth. The firm began '
'notifying affected individuals on August 7, 2026, following '
'an investigation conducted with a cybersecurity firm. Legal '
'professionals are examining the incident to determine whether '
'a class action lawsuit can be filed on behalf of impacted '
'parties.',
'impact': {'brand_reputation_impact': 'Raised concerns about the security of '
'client data',
'data_compromised': 'Sensitive personal and financial information',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuit',
'payment_information_risk': 'High'},
'investigation_status': 'Under review by legal and cybersecurity teams',
'references': [{'source': 'ClassAction.org'}],
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit'},
'response': {'communication_strategy': 'Notified affected individuals on '
'August 7, 2026',
'third_party_assistance': 'Cybersecurity firm'},
'title': 'Forrestall CPAs Data Breach Exposes Sensitive Personal and '
'Financial Information',
'type': 'Data Breach'}