KerberRose Wealth Management Data Breach Exposes Sensitive Information of 27,076 Individuals
Wisconsin-based accounting firm KerberRose S.C. disclosed a data breach affecting 27,076 individuals in its wealth management division, KerberRose Wealth Management LLC. The incident occurred on April 29, 2026, when an unauthorized third party accessed an employee’s email account, subsequently gaining limited access to a backup platform used for wealth management operations.
The breach was detected on May 1, 2026, with no impact on the firm’s CPA or tax services. Exposed data included names, addresses, Social Security numbers, financial account details, bank information, and dates of birth primarily affecting wealth management clients and retirement plan participants.
Breach notifications were filed with attorneys general in Maine, New Hampshire, Vermont, and Massachusetts between May 29 and June 2, 2026, with a small number of residents in each state impacted (ranging from two to six individuals).
In response, KerberRose is offering 24 months of free credit monitoring, credit reports, and fraud assistance through Cyberscout (a TransUnion company) to affected individuals. Enrollment requires a unique code from the notification letter and must be completed within 90 days. The firm has also established a dedicated helpline (1-877-426-6807) for fraud support, available until August 27, 2026.
KerberRose’s president of wealth management, Anthony Powers, acknowledged the severity of the breach in the notification letter, expressing regret for the incident. The company confirmed that no other systems or divisions were compromised.
Source: https://www.claimdepot.com/data-breach/kerberrose-2026
KerberRose cybersecurity rating report: https://www.rankiteo.com/company/kerberrose-s-c-
"id": "KER1780598240",
"linkid": "kerberrose-s-c-",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '27,076',
'industry': 'Financial Services',
'location': 'Wisconsin, USA',
'name': 'KerberRose Wealth Management LLC',
'type': 'Wealth Management Firm'}],
'attack_vector': 'Compromised Employee Email Account',
'customer_advisories': 'Affected individuals offered 24 months of free credit '
'monitoring and fraud assistance; dedicated helpline '
'(1-877-426-6807) available until August 27, 2026',
'data_breach': {'number_of_records_exposed': '27,076',
'personally_identifiable_information': 'Names, addresses, '
'Social Security '
'numbers, dates of '
'birth',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII), Financial '
'Data'},
'date_detected': '2026-05-01',
'date_publicly_disclosed': '2026-05-29',
'description': 'Wisconsin-based accounting firm KerberRose S.C. disclosed a '
'data breach affecting 27,076 individuals in its wealth '
'management division, KerberRose Wealth Management LLC. The '
'incident occurred when an unauthorized third party accessed '
'an employee’s email account, subsequently gaining limited '
'access to a backup platform used for wealth management '
'operations. Exposed data included names, addresses, Social '
'Security numbers, financial account details, bank '
'information, and dates of birth primarily affecting wealth '
'management clients and retirement plan participants.',
'impact': {'data_compromised': 'Names, addresses, Social Security numbers, '
'financial account details, bank information, '
'dates of birth',
'identity_theft_risk': 'High',
'operational_impact': 'No impact on CPA or tax services',
'payment_information_risk': 'High',
'systems_affected': 'Backup platform for wealth management '
'operations'},
'initial_access_broker': {'entry_point': 'Employee email account'},
'references': [{'source': 'KerberRose Breach Notification'}],
'regulatory_compliance': {'regulatory_notifications': 'Filed with attorneys '
'general in Maine, New '
'Hampshire, Vermont, '
'and Massachusetts'},
'response': {'communication_strategy': 'Breach notifications filed with '
'attorneys general; dedicated helpline '
'established',
'remediation_measures': 'Offering 24 months of free credit '
'monitoring, credit reports, and fraud '
'assistance',
'third_party_assistance': 'Cyberscout (TransUnion)'},
'threat_actor': 'Unauthorized Third Party',
'title': 'KerberRose Wealth Management Data Breach Exposes Sensitive '
'Information of 27,076 Individuals',
'type': 'Data Breach'}