Attorney General James Announces Settlement with Wojeski & Company Accounting Firm

According to New York Attorney General Letitia James, Wojeski & Company Accounting Firm agreed to a settlement that strengthens its data security after two cybersecurity incidents exposed the private information of more than 4,700 New Yorkers. The firm suffered a ransomware attack in July 2023 and a subsequent data access incident in May 2024, with insiders from an investigation firm improperly accessing customer data and transmitting it to external addresses.

New York residents were among those affected in both breaches, which included sensitive identifiers such as names, dates of birth, and Social Security numbers, and Wojeski did not notify victims promptly for more than a year. As part of the settlement, Wojeski must pay $60,000 in penalties and implement a series of security upgrades, including encryption of personal data and a formal incident response plan, with one year of free credit monitoring offered to affected individuals. The press release announcing the settlement was issued on 20 October 2025.