On August 11, 2025, the accounting firm Insero & Co. CPAs appeared on the leak site of the Akira ransomware group. The attackers claim to have exfiltrated more than 40GB of the firm’s internal files, including financial records, audit documents, payment details, invoices, employee and customer personal information such as passports, emails, and driver’s licenses, as well as confidential NDAs and other sensitive materials.
Already exposed?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 580 companies.
See what is exposed about you — free scan →Watch Insero & Co. CPAs, LLP
Get alerted the next time Insero & Co. CPAs, LLP files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about Insero & Co. CPAs, LLP’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals.
Reported Details of the Breach
Public reporting indicates that Insero & Co. CPAs, founded in 1973 and based in Rochester, New York, was listed on the Akira ransomware group’s data leak portal. The group posted a notice stating it had obtained more than 40GB of corporate documents. The exposed data categories explicitly listed include financial data, employee and customer records containing passports, driver’s licenses, emails, and other identifying documents. No exact number of affected individuals has been confirmed, but the volume suggests thousands of customer and employee records may be involved. The firm has not yet issued a public statement detailing the timeline of the intrusion or the precise scope of the data taken.
Why This Matters for You and Your Family
If you or any member of your family worked with or hired Insero & Co. CPAs for tax preparation, auditing, or financial services, your personal information may now sit in a ransomware leak repository. Passports, driver’s licenses, and financial reports are high-value items that can be used for identity theft, loan fraud, or to open accounts in your name. Even if you were not a direct client, employees of companies that used the firm’s services could also be exposed. For ordinary families this means months or years of potential cleanup if the data surfaces on dark-web marketplaces or is sold to other criminals. The breach highlights how a single accounting relationship can place your family’s most sensitive documents at risk.
The Doxxing and Identity-Chain Risks
Stolen passports and driver’s licenses do not exist in isolation. Attackers routinely combine them with email addresses and financial records to build complete identity profiles. These profiles then link to social-media handles, phone numbers, and even children’s online gaming accounts that reuse the same passwords or recovery emails. Once one account is compromised, the chain extends outward, enabling doxxing, targeted phishing, or full account takeovers. Credential leaks of this type frequently cascade into gaming platforms, where children’s accounts become entry points for further harassment or extortion. The speed at which these chains form leaves most families unaware until damage has already occurred.