The law firm Cantey Hanger LLP experienced a data breach on February 22, 2024, due to unauthorized access (hacking), as reported by the Maine Office of the Attorney General on August 2, 2024. The incident compromised the personal information of 1,621 individuals, including 2 Maine residents. While the exact type of exposed data was not specified, the breach likely involved sensitive client or employee information, given the firm’s legal nature. Affected individuals were offered 12 months of identity theft protection services through Kroll, suggesting potential risks of identity fraud or financial harm. The breach highlights vulnerabilities in the firm’s cybersecurity defenses, raising concerns about data protection compliance and client trust. No evidence of ransomware or broader systemic disruption was reported, but the exposure of personal data poses reputational and financial risks for the firm and its clients.
TPRM report: https://www.rankiteo.com/company/cantey-hanger-llp
"id": "can1009090725",
"linkid": "cantey-hanger-llp",
"type": "Breach",
"date": "2/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'customers_affected': 1621,
'industry': 'Legal Services',
'name': 'Cantey Hanger LLP',
'type': 'Law Firm'}],
'attack_vector': 'Unauthorized Access (Hacking)',
'customer_advisories': ['Identity theft protection services offered through '
'Kroll for 12 months'],
'data_breach': {'number_of_records_exposed': 1621,
'personally_identifiable_information': True},
'date_detected': '2024-02-22',
'date_publicly_disclosed': '2024-08-02',
'description': 'The Maine Office of the Attorney General reported a data '
'breach involving Cantey Hanger LLP on August 2, 2024. The '
'breach occurred on February 22, 2024, due to unauthorized '
'access (hacking), affecting a total of 1,621 individuals, '
'with 2 of those residing in Maine. Identity theft protection '
'services were offered through Kroll for a duration of 12 '
'months.',
'impact': {'data_compromised': True, 'identity_theft_risk': True},
'references': [{'date_accessed': '2024-08-02',
'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'third_party_assistance': ['Kroll (Identity Theft Protection '
'Services)']},
'title': 'Data Breach at Cantey Hanger LLP',
'type': 'Data Breach'}