RKL Data Breach Investigation

Turke & Strauss LLP, a leading data breach law firm, is investigating RKL LLP regarding its recent data breach. The RKL data breach involved sensitive personal identifiable information belonging to an undetermined number of individuals.


RKL is a professional services firm based in Pennsylvania. The RKL brand is comprised of four distinct entities that collectively serve diverse client needs, including RKL LLP, which provides consulting and tax services. Together, the RKL entities offer a broad range of assurance, tax, business advisory, virtual management, private wealth, and technology capabilities. With nearly 600 professionals working across 24 states, RKL serves a number of industry groups, including manufacturing & distribution, real estate development, financial services, and construction. Headquartered in Lancaster, Pennsylvania, RKL has six additional locations in Pennsylvania.


Recently, RKL discovered that it had experienced a data breach in which sensitive personal identifiable information in its systems may have been accessed. Through its investigation, RKL determined that an unauthorized actor may have accessed this sensitive information through an employee’s email account between May 11, 2023, and June 19, 2023. On December 28, 2023, RKL began notifying individuals whose information may have been impacted. The type of information potentially exposed includes:

  • Name
  • Social Security number
  • Financial account number

If you received a breach notification letter from RKL LLP:

We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at (608) 237-1775 or sam@turkestrauss.com.

If you were impacted by the RKL data breach, you may consider taking the following steps to protect your personal information.

  1. Carefully review the breach notice and retain a copy;
  2. Enroll in any free credit monitoring services provided by RKL LLP:
  3. Change passwords and security questions for online accounts;
  4. Regularly review account statements for signs of fraud or unauthorized activity;
  5. Monitor credit reports for signs of identity theft; and
  6. Contact a credit bureau(s) to request a temporary fraud alert.

Share This Post: