Barton Gilman Reports Data Breach Exposing Sensitive Personal Information
Barton Gilman, a legal services provider, disclosed a data breach to the Maine Attorney General after detecting unauthorized activity in its systems in September 2024. The incident, which occurred between September 13 and 26, 2024, involved an unauthorized third party accessing and potentially acquiring sensitive personal data.
An investigation revealed that exposed information may include names, Social Security numbers, driver’s license numbers, identification numbers, dates of birth, and financial account details. The exact data compromised varies by individual.
On December 23, 2024, Barton Gilman began notifying affected individuals via mail, detailing the specific information impacted and offering 12 months of complimentary credit monitoring services. The breach notice filed with the Maine Attorney General provides further details on the incident.
Source: https://straussborrelli.com/2025/12/29/barton-gilman-data-breach-investigation/
Barton Gilman LLP cybersecurity rating report: https://www.rankiteo.com/company/barton-gilman-llp
"id": "BAR1767038549",
"linkid": "barton-gilman-llp",
"type": "Breach",
"date": "9/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Impacted individuals (number '
'not specified)',
'industry': 'Legal Services',
'name': 'Barton Gilman',
'type': 'Law Firm'}],
'customer_advisories': 'Data breach notification letters sent to impacted '
'individuals',
'data_breach': {'data_exfiltration': 'Potentially accessed and acquired',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Name',
'Social Security number',
'Driver’s license number',
'Identification number',
'Date of birth',
'Financial account information']},
'date_detected': '2024-09-01',
'date_publicly_disclosed': '2025-12-23',
'description': 'Barton Gilman reported a data breach where sensitive personal '
'identifiable information may have been compromised due to '
'unauthorized activity in its technology environment.',
'impact': {'data_compromised': 'Sensitive personal identifiable information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Completed',
'recommendations': '12 months complimentary credit monitoring services for '
'affected individuals',
'references': [{'source': 'Attorney General of Maine'}],
'regulatory_compliance': {'regulatory_notifications': 'Filed with the '
'Attorney General of '
'Maine'},
'response': {'communication_strategy': 'Data breach notification letters '
'mailed to impacted individuals',
'incident_response_plan_activated': 'Yes'},
'threat_actor': 'Unauthorized third party',
'title': 'Barton Gilman Data Breach',
'type': 'Data Breach'}