Michael J. Berger & Co. Data Breach Exposed SSNs and Financial Info | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware


Michael J. Berger & Co., CPA LLP (MJB), a certified public accounting firm based in Ronkonkoma, New York, disclosed a data breach that resulted from a ransomware attack on its computer network.The breach was disclosed to the New Hampshire and Vermont attorneys general on Oct. 21, 2026. The firm began notifying affected consumers on Oct. 20, 2026.An unauthorized actor gained access to the firm’s network on Sept. 17, 2025. Two days later, the firm received alerts of a disruption to its computer systems caused by the ransomware event.Upon identifying the disruption, the firm began working under the guidance of specialists to restore its systems safely and to investigate the nature and scope of the incident. Through its investigation, the firm concluded that the unauthorized actor had accessed the network and taken certain files.The firm initially attempted to identify the individuals whose information may have been affected by examining its internal client management system. However, it ultimately determined that outside expertise would be needed to gain an accurate overview of the population whose information was involved and the related data elements. The firm then engaged a third-party vendor to review the dataset that was taken.The vendor provided its results on May 13, 2026. The firm confirmed on July 21, 2026, that certain files in the dataset taken from its network contained personal information.The types of information exposed varied by individual but may have included names, Social Security numbers, financial account information and credit and debit account information.Michael J. Berger & Co.’s response to the breachThe firm is offering 12 months of complimentary single-bureau credit monitoring, fraud consultation and identity theft restoration services through HaystackID to individuals whose Social Security numbers were involved in the breach.Affected individuals can enroll in credit monitoring through Equifax at www.equifax.com/activate within 90 days of receiving their notification letter. An activation code required for enrollment was included in each letter.Individuals with questions or concerns can contact a dedicated toll-free assistance line at 844-207-7016 during the hours of 9 a.m. to 9 p.m. Eastern time, Monday through Friday, excluding U.S. national holidays.

——————————————————–
Click Here For The Original Source.

.........................