Kerkering Barberio Reports Data Breach Affecting Sensitive Personal Information
Kerkering Barberio, a U.S.-based firm, disclosed a data breach to the Maine Attorney General after detecting unauthorized access to four employee email accounts on or around May 27, 2025. The incident triggered an internal investigation, which confirmed that an unauthorized third party may have accessed and acquired sensitive personal data stored in the compromised accounts.
The exposed information varies by individual but includes names, Social Security numbers, addresses, and email addresses. Following a review to identify affected parties, Kerkering Barberio began mailing breach notification letters to impacted individuals on March 13, 2026. The notices detail the specific types of compromised data and offer complimentary credit monitoring services to those affected.
The breach highlights the risks of email-based attacks and the delayed timeline between detection and public notification. Further details are available in the breach notice filed with the Maine Attorney General.
Source: https://straussborrelli.com/2026/03/16/kerkering-barberio-co-data-breach-investigation/
Kerkering Barberio cybersecurity rating report: https://www.rankiteo.com/company/kerkering-barberio
"id": "KER1773700009",
"linkid": "kerkering-barberio",
"type": "Breach",
"date": "5/2025",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'industry': 'Professional Services '
'(Accounting/Finance)',
'location': 'United States',
'name': 'Kerkering Barberio',
'type': 'Firm'}],
'attack_vector': 'Email Compromise',
'customer_advisories': 'Breach notification letters sent to impacted '
'individuals',
'data_breach': {'data_exfiltration': 'Confirmed',
'personally_identifiable_information': 'Names, Social '
'Security numbers, '
'addresses, email '
'addresses',
'sensitivity_of_data': 'High (Social Security numbers, '
'addresses, email addresses)',
'type_of_data_compromised': 'Personal Identifiable '
'Information (PII)'},
'date_detected': '2025-05-27',
'date_publicly_disclosed': '2026-03-13',
'description': 'Kerkering Barberio, a U.S.-based firm, disclosed a data '
'breach to the Maine Attorney General after detecting '
'unauthorized access to four employee email accounts. The '
'incident triggered an internal investigation, which confirmed '
'that an unauthorized third party may have accessed and '
'acquired sensitive personal data stored in the compromised '
'accounts.',
'impact': {'data_compromised': 'Sensitive personal information including '
'names, Social Security numbers, addresses, '
'and email addresses',
'identity_theft_risk': 'High',
'systems_affected': 'Four employee email accounts'},
'initial_access_broker': {'entry_point': 'Employee email accounts'},
'investigation_status': 'Completed (notification phase)',
'lessons_learned': 'Highlights the risks of email-based attacks and delayed '
'public notification timelines',
'post_incident_analysis': {'root_causes': 'Unauthorized access to employee '
'email accounts'},
'references': [{'source': 'Maine Attorney General Breach Notice'}],
'regulatory_compliance': {'regulatory_notifications': 'Filed with Maine '
'Attorney General'},
'response': {'communication_strategy': 'Breach notification letters mailed to '
'impacted individuals',
'remediation_measures': 'Complimentary credit monitoring '
'services offered to affected '
'individuals'},
'title': 'Kerkering Barberio Data Breach',
'type': 'Data Breach'}