Zelenkofske Axelrod Data Breach Exposed PHI and PII Data - Claim Depot
A regional CPA firm in Harrisburg, Pennsylvania, disclosed a data breach that exposed sensitive personal, financial, and health information.
Zelenkofske Axelrod discovered the breach on Jan. 25, 2026, after detecting suspicious activity within its network. The firm launched an investigation with third-party cybersecurity specialists, which confirmed that files had been accessed and copied during the unauthorized access period.
On Feb. 23, 2026, a ransomware group known as DragonForce claimed responsibility for the attack on the dark web. The group stated it had obtained 239.15 GB of the firm's data and threatened to publish the stolen information within six to seven days.
The types of personally identifiable information and protected health information exposed varied by individual but could include names, Social Security numbers, government-issued identification numbers, financial account information and payment card information, medical information and health insurance information.
The firm is encouraging affected individuals to remain vigilant by reviewing account statements, credit reports, and explanations of benefits for any suspicious activity. It has set up a dedicated call center for questions, available Monday through Friday from 9 a.m. to 9 p.m. Eastern time, excluding U.S. holidays.
Individuals may also contact the firm at 830 Sir Thomas Ct., Suite 100, Harrisburg, PA 17109, or by phone at 1-877-201-4537.
Related
