Where does the DesRoches & Company CPAs PC case file come from?

Every entry is taken from the breach report DesRoches & Company CPAs PC lodged with the Indiana Attorney General. Nothing here is estimated.

Why do the incident date and the report date differ?

Companies usually investigate before they report. The gap between the two dates shows how long that took.

What does the records-affected figure count?

It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.

Does this case file change over time?

Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Case file

Case File: DesRoches & Company CPAs PC Data Breach

This file collects the dated facts on record for the DesRoches & Company CPAs PC incident. The state report is dated July 29, 2025. The incident itself is dated February 24, 2025.

Timeline

155 days separate the incident date from the date it was reported.

February 24, 2025Incident dateWhen the filing says the breach took place.
July 29, 2025Report filed in IndianaDate the notice was lodged with the Indiana Attorney General.

Case facts

Filing state: Indiana
Date reported: July 29, 2025
Incident date: February 24, 2025
Receiving office: Indiana Attorney General

Case notes

DesRoches & Company CPAs PC, an accounting firm based in Indiana, formally reported a data security incident to regulatory authorities on July 29, 2025. This filing indicates that the incident commenced on or around February 24, 2025. The company has confirmed that an investigation into the nature and full extent of the event is currently underway.

While the specific types of personal information involved in this incident have not been detailed in the public record, DesRoches & Company CPAs PC has acknowledged that individuals' data was affected. The ongoing investigation aims to determine precisely what information was compromised and the total number of individuals impacted.

Individuals who may have been affected by this breach should remain vigilant regarding their personal accounts and records. It is advisable to review account statements, credit reports, and any communications for unusual activity. Promptly report any suspicious transactions or inquiries to the relevant financial institutions or service providers.

Consider implementing stronger security practices for all online accounts, including using unique, complex passwords and enabling multi-factor authentication wherever possible. Regularly checking privacy settings on online services can also help protect your information. These steps are widely recommended for safeguarding personal data in the digital age.

Questions about this case file

Where does the DesRoches & Company CPAs PC case file come from?: Every entry is taken from the breach report DesRoches & Company CPAs PC lodged with the Indiana Attorney General. Nothing here is estimated.
Why do the incident date and the report date differ?: Companies usually investigate before they report. The gap between the two dates shows how long that took.
What does the records-affected figure count?: It is the number the company gave the state. It can cover residents of that state only, so the national total may be higher.
Does this case file change over time?: Yes. When a company files an update or a new state publishes its copy of the report, the dates and counts here are refreshed.

Indiana data breaches

Filing source: Indiana Attorney General

Named in the DesRoches & Company CPAs PC breach?

Attach your notice and a short note. An attorney checks it against this case file at no cost.

Timeline

Case facts

Case notes

Questions about this case file

More Indiana case files