Dubroff, Easley & Lovell, LLP reported that an unauthorized actor gained access to its systems between September 2 and September 22, 2025. The firm discovered the incident on September 22, 2025, and determined on March 3, 2026, that personal data may have been compromised. The firm engaged outside cybersecurity professionals, secured systems, and is offering identity monitoring through Kroll.