Henry Rossi & Company LLP Data Breach Exposes Sensitive Information of 2,720 Individuals
A data breach at Henry Rossi & Company, LLP, a certified public accounting firm based in Monroeville, Pennsylvania, has exposed the sensitive personal information of 2,720 individuals in the U.S. The firm, which serves clients in construction, real estate, healthcare, and nonprofit sectors, detected unusual activity in its systems on January 18, 2026.
A subsequent investigation, including third-party forensic specialists, confirmed that unauthorized access occurred on January 17 and 18, 2026, with certain files accessed by an external actor. By April 3, 2026, the firm determined that the breach involved audit files tied to the Steamfitters Local #449 Medical & Benefit Fund, containing exposed data such as:
- Full names
- Social Security numbers
- Dates of birth
Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating the incident and potential compensation for affected individuals. The breach highlights risks associated with third-party service providers handling sensitive financial and personal data.
Source: https://www.claimdepot.com/investigations/henry-rossi-company-data-breach-2026
Henry & Peters, P.C. cybersecurity rating report: https://www.rankiteo.com/company/henry-&-peters-p-c-
"id": "HEN1783356100",
"linkid": "henry-&-peters-p-c-",
"type": "Breach",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '2,720 individuals',
'industry': 'Accounting, Finance',
'location': 'Monroeville, Pennsylvania, USA',
'name': 'Henry Rossi & Company, LLP',
'type': 'Certified Public Accounting Firm'},
{'customers_affected': '2,720 individuals',
'industry': 'Healthcare, Labor Union',
'name': 'Steamfitters Local #449 Medical & Benefit '
'Fund',
'type': 'Benefit Fund'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'file_types_exposed': 'Audit files',
'number_of_records_exposed': '2,720',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Full names',
'Social Security numbers',
'Dates of birth']},
'date_detected': '2026-01-18',
'description': 'A data breach at Henry Rossi & Company, LLP, a certified '
'public accounting firm, exposed the sensitive personal '
'information of 2,720 individuals in the U.S. Unauthorized '
'access occurred on January 17 and 18, 2026, with audit files '
'tied to the Steamfitters Local #449 Medical & Benefit Fund '
'compromised, containing full names, Social Security numbers, '
'and dates of birth.',
'impact': {'data_compromised': 'Sensitive personal information (full names, '
'Social Security numbers, dates of birth)',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action investigation by '
'Shamis & Gentile P.A.'},
'investigation_status': 'Ongoing (as of April 3, 2026)',
'references': [{'source': 'Cyber Incident Description'}],
'regulatory_compliance': {'legal_actions': 'Class action investigation by '
'Shamis & Gentile P.A.'},
'response': {'third_party_assistance': 'Third-party forensic specialists'},
'title': 'Henry Rossi & Company LLP Data Breach Exposes Sensitive Information '
'of 2,720 Individuals',
'type': 'Data Breach'}