KerberRose Data Breach Impacts 27,076 Individuals

Wisconsin-based certified public accounting firm, KerberRose S.C., disclosed a data breach in its wealth management division that affected approximately 27,076 individuals in the United States.

On April 29, 2026, an unauthorized third party gained access to an email account belonging to one KerberRose employee, according to the company's notification to consumers. The compromised email account resulted in limited access to a portion of a back-up platform used in operating the firm's wealth management business, which is run through a division called KerberRose Wealth Management LLC.

KerberRose became aware of the incident two days later, on May 1, 2026. According to the notification, no other systems and no other divisions of KerberRose's business were affected by the breach. The company specifically noted that the CPA and tax services offered through KerberRose S.C. were unaffected.

The affected individuals include wealth management customers of KerberRose as well as applicants for or participants in retirement plans for which the firm provides services, according to the notification letter.

The types of personal information that may have been exposed include names, addresses, Social Security numbers, financial account numbers, bank account information and dates of birth.

According to the respective state filings, 345 Indiana residents, four Maine residents, six Massachusetts residents, three New Hampshire residents and two Vermont residents were among those affected. The company mailed notification letters to affected consumers on May 29, 2026.

KerberRose's response

Given that the breach exposed highly sensitive information, including Social Security numbers and financial account details, KerberRose is offering affected individuals 24 months of free credit monitoring, credit report and credit score services through Cyberscout. The company is also providing proactive fraud assistance to help individuals who have questions or who become victims of fraud.

To enroll, affected individuals can visit the Cyberscout enrollment page and enter the unique code included in their notification letter. Enrollment must be completed within 90 days of the letter's date.

KerberRose has set up a dedicated help line at 1-877-426-6807, staffed with fraud specialists and available from 8 a.m. to 8 p.m. Eastern time, Monday through Friday, excluding holidays. The help line will be available for 90 days from the date of the notification letter.

Affected individuals may also contact KerberRose directly at 1-920-785-8073 with questions or concerns.