Henry Rossi Data Breach Exposes Social Security Numbers

Henry Rossi & Co., LLP, a certified public accounting firm based in Monroeville, Pennsylvania, disclosed a data breach that affected approximately 2,720 individuals in the United States.

An unauthorized actor gained access to Henry Rossi's computer environment on Jan. 17 and Jan. 18, 2026. The firm detected suspicious activity within its systems and began taking steps to respond to the situation.

The firm's investigation determined that certain files were accessed by the unauthorized individual during the two-day intrusion. Those files were audit records related to Steamfitters Local #449 Medical & Benefit Fund.

After the forensic investigation concluded, Henry Rossi conducted a separate internal review of the affected files to determine whether the files that were accessed contained any sensitive personal information. The firm completed this review on April 3, 2026.

The types of personally identifiable information exposed included full names, Social Security numbers and dates of birth.

The posted a notice on its website concerning the breach, as well as filed a disclosure with the U.S. Department of Health and Human Services on June 2, 2026. Henry Rossi began notifying affected individuals on June 10, 2026.

Henry Rossi's response to the breach

The firm has set up a dedicated phone line for individuals who believe they may be affected by the breach. The number is 933-918-5956, and it is available Monday through Friday from 9:00 a.m. to 9:00 p.m. Eastern Time, excluding major U.S. holidays. Individuals can call with questions about the incident and what steps they can take to protect their information.

The firm's notification did not include an offer of free credit monitoring or identity protection services for affected individuals.