Henry Rossi says cyber security incident compromised sensitive client data

Public accounting firm Henry Rossi said that the data security incident it experienced earlier this year compromised the sensitive personal information of its clients and employees.

 

Based in Monroeville, Pennsylvania, Henry Rossi &Co. is a public accounting and consulting firm that provides tax, auditing, and bookkeeping services for individuals and closely held businesses.

 

In a data security incident notice published on its website, Henry Rossi said that on January 18, it identified unauthorised access within its internal network. The accounting firm immediately launched an investigation, with assistance from external cyber security experts, to determine the nature and scope of the incident.

 

It also took steps to secure the affected systems and notified relevant law enforcement authorities about the same.

 

“Our investigation determined that our environment was subject to unauthorised access on January 17, 2026 and January 18, 2026, and certain files were accessed by the unauthorised actor,” Henry Rossi said.

 

The compromised data included names, Social Security numbers, dates of birth. In a filing with the U.S. Department of Health and Human Services, Henry Rossi said it has identified 2,720 individuals affected by the incident.

 

“Upon learning of this event, we launched an investigation and assessed the security of Henry Rossi’s environment. As part of our ongoing commitment to information security, we are also reviewing our existing policies and procedures and implementing additional administrative and technical safeguards to further secure the information in our care,” the accounting firm added.

 

Henry Rossi has advised all affected individuals to regularly monitor their credit reports, account and benefit statements and report any suspicious activity to law enforcement authorities, including the police and the state attorney general.

 

At the time of publishing, no known hacker group claimed responsibility for the cyber attack on Henry Rossi. The accounting firm also did not share details on who was behind the attack, how much data was compromised, or whether it had received a ransom demand.