Brody Wilkinson PC

The Maine Office of the Attorney General disclosed a data breach affecting Brody Wilkinson PC, a law firm, in September 2020. The incident occurred between January 29, 2020, and February 6, 2020, when an unauthorized external actor gained access to employee email accounts. The breach exposed Social Security numbers (SSNs), putting approximately 1,644 individuals at risk of identity theft or fraud. The attack was classified as an external hacking incident, suggesting a targeted cyber intrusion rather than an internal leak or accidental exposure. While the full scope of the compromised data beyond SSNs was not detailed, the exposure of such sensitive personally identifiable information (PII) poses significant long-term risks for affected individuals, including potential financial fraud, credit damage, or misuse of identity. The firm likely faced regulatory scrutiny, reputational harm, and potential legal liabilities due to the failure to prevent unauthorized access to confidential employee communications.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/c4c1528a-a924-4907-b06b-34c80039bb03.shtml

TPRM report: https://www.rankiteo.com/company/brody-wilkinson-pc

"id": "bro1006091725",
"linkid": "brody-wilkinson-pc",
"type": "Breach",
"date": "1/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': '1,644 individuals',
                        'industry': 'Legal Services',
                        'name': 'Brody Wilkinson PC',
                        'type': 'Law Firm'}],
 'attack_vector': 'External Hacking (Email Account Compromise)',
 'data_breach': {'number_of_records_exposed': '1,644',
                 'personally_identifiable_information': 'Yes (Social Security '
                                                        'Numbers)',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security Numbers']},
 'date_publicly_disclosed': '2020-09-23',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Brody Wilkinson PC on September 23, 2020. '
                'The breach occurred between January 29, 2020 and February 6, '
                '2020, when an unauthorized individual accessed employee email '
                'accounts, potentially compromising Social Security numbers. '
                'Approximately 1,644 individuals were affected by this '
                'external hacking incident.',
 'impact': {'data_compromised': ['Social Security Numbers'],
            'identity_theft_risk': 'High (Social Security Numbers exposed)',
            'systems_affected': ['Employee Email Accounts']},
 'initial_access_broker': {'entry_point': 'Employee Email Accounts'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'threat_actor': 'Unauthorized Individual',
 'title': 'Data Breach at Brody Wilkinson PC',
 'type': 'Data Breach'}