D.B. Root & Company Data Breach Exposes Sensitive Financial Information of 2,806 Individuals D.B. Root & Company, LLC (now operating as DBR & CO), a Pittsburgh-based SEC-registered investment advisory firm, disclosed a data breach that compromised the personal and financial information of 2,806 individuals across multiple U.S. states. The firm, which provides wealth management and financial planning services, detected unauthorized network access on November 11, 2025, and immediately secured its systems while launching an investigation with external cybersecurity experts. A forensic review concluded on April 9, 2026, revealing that sensitive data including full names, Social Security numbers, and financial account numbers was accessed without authorization between November 11 and 12, 2025. Affected individuals, primarily residents of Maine, Massachusetts, Rhode Island, and Vermont, began receiving written notifications on May 27, 2026. The breach has prompted legal action, with class action law firm Shamis & Gentile P.A. investigating potential claims for compensation on behalf of impacted individuals. The incident underscores the risks to financial service providers handling sensitive client data.