Almeida Law Group is investigating a data breach at D.B. Root & Company, LLC. The breach occurred on November 11, 2025, and was discovered on May 13, 2026. If you were affected, contact Almeida Law Group.
About D.B. Root & Company, LLC
D.B. Root & Company, LLC, operating as DBR & CO, is an SEC-registered investment adviser founded in 1994 and based in Pittsburgh, Pennsylvania. The firm provides comprehensive financial planning and wealth management services to individuals, families, retirement plan sponsors, and institutions, and also serves as a fiduciary investment adviser for employer-sponsored retirement plans such as 401(k) and 403(b) plans. As a registered investment adviser, the firm maintains sensitive personal and financial information about its clients.
What Happened?
D.B. Root & Company, LLC was listed in a Maine Attorney General data breach filing reported on June 2, 2026. According to the filing and the consumer notice letter, an unauthorized individual gained access to DBR & CO’s network on or about November 11, 2025. A forensic investigation, conducted with the help of external cybersecurity professionals, determined on April 9, 2026, that between November 11 and 12, 2025, a limited amount of personal information may have been subject to unauthorized acquisition. The compromised information included full names, and data types varied by individual. The notice filename references Social Security numbers, indicating SSNs were among the information involved for at least some affected individuals. A total of 2,806 people were notified. Written notifications were sent to consumers on May 27, 2026. DBR & CO is offering 12 months of complimentary identity monitoring through Kroll, including credit monitoring, fraud consultation, and identity theft restoration.
The approximately six-month gap between the breach date (November 11, 2025) and its discovery (May 13, 2026) is notable. No ransomware group claims or threat-actor attribution have appeared in public reporting, and the Maine filing classifies the incident type as “Other” without further detail. No class action litigation connected to this incident has been identified as of early June 2026.
Key Facts at a Glance
- Company or Organization: D.B. Root & Company, LLC (DBR & CO)
- Industry: Financial Services — Registered Investment Adviser (Wealth Management)
- Location: 436 Seventh Avenue, Suite 2800, Pittsburgh, PA 15219
- Incident type: Unauthorized network access (classified as “Other” in Maine filing)
- Date of breach: November 11, 2025
- Date breach discovered: May 13, 2026
- Date of consumer notification: May 27, 2026
- Total persons affected: 2,806
- Identity theft protection offered: Yes — Kroll credit monitoring, fraud consultation, and identity theft restoration (12 months)
- Source: Maine Attorney General Data Breach Filing; SEC IAPD — D.B. Root & Company, LLC
What Should You Do?
If you received a notice from DBR & CO, enroll in the complimentary 12-month Kroll identity monitoring service before the enrollment deadline shown in your notice letter. You should also consider placing a fraud alert or credit freeze with the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for anyone to open new accounts in your name. Review your credit reports for free at AnnualCreditReport.com and watch your financial account statements closely for any unusual or unauthorized activity. If you believe your information has already been misused, visit IdentityTheft.gov for step-by-step recovery guidance.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
