The Akira ransomware group claims it stole 88GB of data from accounting firm Krycler, Ervin, Taubman & Kaminsky, including Social Security numbers, passports, driver’s licenses, financial records, and client information. The firm has not publicly confirmed the incident. Affected employees and clients should monitor credit reports and consider a credit freeze immediately.
| Company | Krycler, Ervin, Taubman & Kaminsky |
|---|---|
| Industry | Finance |
| Data Types Exposed | Passports, Driver’s Licenses, Social Security Numbers, Birth and Death Certificates, Financial Records, Insurance Information, Credit Card Information, Client Information |
| People Affected | Not Publicly Disclosed |
| Attack Method | Ransomware |
| Regulators Notified | Not Publicly Disclosed |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the Krycler, Ervin, Taubman & Kaminsky Data Breach?
A ransomware group known as Akira has claimed responsibility for a cyberattack on Krycler, Ervin, Taubman & Kaminsky, an accounting, litigation support, and consulting firm based in Sherman Oaks, California. According to the group’s own claims, the attackers accessed and stole roughly 88 gigabytes of corporate data from the firm’s network. This Krycler Ervin Taubman data breach has not been publicly confirmed by the firm itself as of this writing.
The breach discovery date has not been publicly disclosed. Similarly, the firm has not released a timeline describing when the intrusion began or how long the attackers had access to its systems. What is known comes only from the Akira group’s own leak-site listing, which describes the stolen files in detail.
Because this information comes from a threat actor’s claim rather than from the firm, important details remain unverified. There is no independent confirmation yet of how the attackers gained entry, whether through phishing, stolen credentials, or a software vulnerability. As a result, affected individuals should treat the situation as serious but should also watch for official updates from the firm as more facts emerge.
Who was affected?
The population affected by this incident has not been publicly disclosed. Based on the nature of the stolen files described by the attackers, however, both current and former employees of the firm appear to be implicated. In addition, the firm’s clients may also be affected, since the stolen data reportedly includes client information.
Given that Krycler, Ervin, Taubman & Kaminsky provides accounting and litigation support services, its client base likely includes individuals and businesses who shared sensitive financial and legal records. Because the exact number of affected people has not been released, it is not yet possible to say how many individuals are impacted. Anyone who has worked with or been employed by the firm should stay alert for a formal notification.
What Information Was Potentially Exposed?
The Akira group’s claims describe a wide range of sensitive personal and business records allegedly taken during the attack. This mix of employee and client data raises significant concern, since it spans identity documents, financial accounts, and confidential legal materials.
- Passports
- Driver’s licenses
- Social Security numbers
- Death and birth certificates
- Financial records
- Insurance information
- Credit card information
- Client information
- Non-disclosure agreements (NDAs)
If these claims are accurate, the exposure of Social Security numbers combined with government-issued identification creates a high risk of identity theft. Criminals can use this combination to open new credit accounts, file fraudulent tax returns, or apply for loans in a victim’s name. Because birth and death certificates were also allegedly included, the data could even support more elaborate identity fraud schemes.
Meanwhile, the exposure of credit card numbers and financial records raises the risk of direct financial fraud. Fraudsters could attempt unauthorized purchases or drain existing accounts. In addition, because NDAs and client information may have been included, businesses connected to the firm could also face confidentiality and reputational risks if this material surfaces publicly.
What is the company doing?
As of now, Krycler, Ervin, Taubman & Kaminsky has not publicly confirmed this incident. There is no publicly available statement from the firm describing an investigation, remediation steps, or a notification timeline. This information gap means affected individuals cannot yet rely on official guidance from the company.
Because the claims originate solely from the Akira ransomware group’s leak-site posting, it remains unclear whether the firm has engaged forensic investigators or law enforcement. Readers should look for updates directly from the firm or from state regulators in the coming weeks. Until an official notification is issued, individuals should assume their information could be at risk and take independent precautions.
What Should Affected Individuals Do?
Monitor Your Credit Reports
Affected individuals should regularly check their credit reports for unfamiliar accounts or inquiries. You can request free reports from each of the three major credit bureaus through AnnualCreditReport.com. Reviewing these reports often helps catch fraudulent activity early.
Because Social Security numbers may have been exposed, this step is especially important. Identity thieves often wait months before using stolen data, so continued monitoring over the next year is wise. If you notice any unauthorized account, report it to the bureau and the creditor immediately.
Consider a Fraud Alert or Credit Freeze
Given the alleged exposure of Social Security numbers and financial information, placing a fraud alert or credit freeze is a strong protective step. A fraud alert requires lenders to verify your identity before issuing new credit. A credit freeze goes further by blocking most new account openings entirely.
You can request either option directly through each credit bureau’s website or by phone. Although a freeze requires a temporary lift when you apply for legitimate credit, it offers stronger protection against identity theft. This precaution is especially relevant when government ID numbers like passports and driver’s licenses may also be compromised.
Watch for Phishing and Scam Attempts
Because personal details may now be in criminal hands, affected individuals should be cautious of unexpected emails, texts, or phone calls. Scammers often use stolen data to craft convincing messages that appear to come from trusted organizations. Never click links or share further information in response to unsolicited contact.
Instead, verify any suspicious message by contacting the organization directly using a known phone number or website. This simple habit can prevent further exposure of your personal or financial information. Staying alert is one of the most effective defenses against follow-on scams after a breach like this.
Protect Your Identity Documents
Since passports, driver’s licenses, and birth or death certificates may have been exposed, consider contacting the relevant issuing agencies. For example, the State Department can advise on passport security concerns, while your state’s DMV can discuss driver’s license protections. These agencies may offer guidance specific to document-based fraud.
In addition, keep copies of any correspondence related to this incident in case you need to dispute fraudulent use of your identity later. If you discover misuse of your identity documents, file a report with local law enforcement and the Federal Trade Commission. Acting quickly can limit the damage caused by stolen identification records.
Consult a Data Breach Attorney
Because this breach may involve highly sensitive personal and financial data, affected individuals may want to speak with a data breach attorney. An attorney can help explain your legal rights and whether you may qualify to join or pursue a claim. Many offer free initial consultations to evaluate your situation.
Furthermore, an attorney can help you understand filing deadlines and what documentation to preserve. This is especially useful if the firm later confirms the scope of the incident publicly. Taking this step early ensures you do not miss any applicable legal windows.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.