Tostrud & Temp Data Breach Exposes Sensitive Financial Data

Tostrud & Temp S.C., a full-service certified public accounting firm based in La Crosse, Wisconsin, disclosed a data breach.

A disclosure filed with the Massachusetts Office of Consumer Affairs and Business Regulation on Oct. 27, 2026. The company notified affected individuals by written letter beginning on Oct. 21, 2026.

On July 8, 2026, a ransomware group known as PEAR posted a claim on the Tor network stating it had obtained 770 gigabytes of data from the accounting firm.

The specific dates of the intrusion and the method by which it was discovered have not been detailed in the company's publicly available disclosures.

The types of personal information confirmed to have been potentially exposed in the breach included Social Security numbers, financial account information and driver's license numbers.

Tostrud & Temp's response to the breach

The company is offering affected individuals 24 months of free credit monitoring and identity protection services through Experian. Affected individuals who received a notification letter can enroll in these services. The deadline to enroll is Dec. 31, 2026.

The company advised affected individuals to remain vigilant by reviewing credit card account statements and credit reports for any unauthorized activity.