Dinowitz & Bove CPA Data Breach — Class Action Review

Dinowitz & Bove CPA functions as a specialized certified public accounting firm providing comprehensive financial, tax preparation, auditing, and corporate advisory services to individuals, small businesses, and commercial enterprises. Because of the nature of modern accounting and financial advisory work, firms like this occupy a position of deep trust, requiring clients to share vast amounts of intensely personal and proprietary information. To execute tax filings, manage payroll, perform forensic audits, and handle corporate compliance, Dinowitz & Bove CPA necessarily accumulates, processes, and stores voluminous records containing the most sensitive financial and identifying markers of its clientele.

In 2025, Dinowitz & Bove CPA formally reported a security incident to the New Hampshire Attorney General, revealing that unauthorized actors had compromised their digital infrastructure. Breaches targeting accounting firms and financial service providers typically involve sophisticated cyberattacks such as credential harvesting, ransomware deployment, or unauthorized network intrusions designed to siphon high-value data repositories. Because CPAs frequently maintain interconnected networks for client portals, legacy database archives, and cloud-based document sharing platforms, a single point of entry can expose extensive historical records that have accumulated over years of business operations.

The exposure of financial and tax data carries severe, long-term consequences for affected individuals and business owners. When records containing Social Security numbers, dates of birth, complete tax returns, and banking details are compromised, victims face an immediate and elevated risk of identity theft, fraudulent tax filings, and unauthorized account takeovers. Criminals frequently weaponize stolen tax documents to file fraudulent returns and intercept government refunds, or utilize banking and routing details to execute unauthorized wire transfers and drain personal and business accounts. Furthermore, the exposure of corporate financial records can compromise proprietary business data, leaving organizations vulnerable to targeted financial fraud and operational disruption.

As a financial services provider handling non-public personal information, Dinowitz & Bove CPA was bound by stringent legal and regulatory obligations to secure their digital environment. Under the Gramm-Leach-Bliley Act (GLBA) and applicable New Hampshire state data protection statutes, financial institutions and professional service firms are required to implement robust administrative, technical, and physical safeguards to protect sensitive client data. These statutory mandates require regular risk assessments, encryption of data at rest and in transit, multi-factor authentication, and continuous monitoring of network activity. The occurrence of this data breach strongly suggests a failure in these mandatory security protocols, raising serious questions about whether the firm lived up to its legal duty of care.

Receiving a data breach notification letter from Dinowitz & Bove CPA serves as official legal acknowledgment that your confidential information was compromised due to inadequate security measures. Under the law, this notification establishes the legal standing necessary to participate in a class action lawsuit aimed at holding the firm accountable for its negligence. Individuals whose data has been exposed do not need to wait until they experience actual financial fraud or out-of-pocket loss to take legal action; the increased risk of future identity theft and the necessity of purchasing credit monitoring services constitute legally cognizable harms. Our firm evaluates these cases on a contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.