Davidoff Hutcher & Citron LLP

The law firm Davidoff Hutcher & Citron LLP experienced a data breach discovered on July 11, 2024, and reported by the Maine Office of the Attorney General on August 9, 2024. The incident involved unauthorized access (hacking) to the firm’s network, compromising the personal information of 21,691 individuals. The exposed data included names, though the full scope of compromised details was not fully disclosed. In response, the firm offered 12 months of identity theft protection services through Cyberscout and TransUnion to affected individuals. The breach highlights vulnerabilities in the firm’s cybersecurity measures, raising concerns about potential identity theft, fraud, or further exploitation of the exposed data. While no financial or highly sensitive details (e.g., Social Security numbers, financial records) were explicitly confirmed as leaked, the scale of the breach and the nature of the compromised information (personal identifiers) pose reputational and operational risks to the firm and its clients.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/a21f5ed5-60e6-4da2-9d8d-1345331e87d1.html

TPRM report: https://www.rankiteo.com/company/davidoff-hutcher-&-citron-llp

"id": "dav022090625",
"linkid": "davidoff-hutcher-&-citron-llp",
"type": "Breach",
"date": "8/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 21691,
                        'industry': 'Legal Services',
                        'name': 'Davidoff Hutcher & Citron LLP',
                        'type': 'Law Firm'}],
 'attack_vector': 'Hacking/Unauthorized Access',
 'customer_advisories': 'Identity theft protection services offered for 12 '
                        'months via Cyberscout and TransUnion',
 'data_breach': {'number_of_records_exposed': 21691,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'Moderate (PII)',
                 'type_of_data_compromised': ['Personal Information (Names)']},
 'date_detected': '2024-07-11',
 'date_publicly_disclosed': '2024-08-09',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Davidoff Hutcher & Citron LLP on August 9, '
                '2024. The breach, discovered on July 11, 2024, involved '
                "unauthorized access (hacking) to the firm's network and "
                'affected 21,691 individuals. Personal information potentially '
                'compromised included names. Identity theft protection '
                'services (12 months) were offered through Cyberscout and '
                'TransUnion.',
 'impact': {'data_compromised': ['Names'],
            'identity_theft_risk': 'High (identity theft protection services '
                                   'offered)'},
 'references': [{'date_accessed': '2024-08-09',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Offered identity theft protection '
                                        'services (12 months)',
              'third_party_assistance': ['Cyberscout', 'TransUnion']},
 'title': 'Data Breach at Davidoff Hutcher & Citron LLP',
 'type': 'Data Breach'}