The Vermont Office of the Attorney General disclosed a data breach affecting Dohman, Akerlund & Eddy, LLC on February 28, 2024, with the report filed on October 8, 2024. The incident involved unauthorized acquisition of personal information, though the exact number of impacted individuals remains unspecified. Among the compromised data were names, with potential exposure of additional sensitive details not explicitly mentioned in the report. The breach suggests a failure in safeguarding client or employee records, raising concerns over identity theft, fraud, or misuse of personal data. While the full scope of the breach—such as whether financial, medical, or other high-risk information was accessed—is unclear, the unauthorized access alone indicates a significant lapse in cybersecurity protocols. The delayed reporting (over seven months) may further exacerbate reputational and legal risks for the firm, particularly if affected parties include clients with sensitive legal or financial ties to the company.
Source: https://ago.vermont.gov/document/2024-10-08-dohman-akerlund-eddy-data-breach-notice-consumers
TPRM report: https://www.rankiteo.com/company/dohman-akerlund-&-eddy
"id": "doh949091725",
"linkid": "dohman-akerlund-&-eddy",
"type": "Breach",
"date": "2/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Legal Services',
'location': 'Vermont, USA',
'name': 'Dohman, Akerlund & Eddy, LLC',
'type': 'Law Firm'}],
'data_breach': {'data_exfiltration': 'Yes (personal information acquired '
'without authorization)',
'personally_identifiable_information': 'Yes (names)',
'sensitivity_of_data': 'Moderate (includes names)',
'type_of_data_compromised': ['Personal Information']},
'date_detected': '2024-02-28',
'date_publicly_disclosed': '2024-10-08',
'description': 'The Vermont Office of the Attorney General reported that '
'Dohman, Akerlund & Eddy, LLC experienced a data breach on '
'February 28, 2024, which may have involved personal '
'information. The report, provided on October 8, 2024, does '
'not specify the number of individuals affected, but it '
'indicates that some personal information was acquired without '
'authorization, including names.',
'impact': {'data_compromised': ['names'],
'identity_theft_risk': 'Potential (personal information acquired)'},
'references': [{'date_accessed': '2024-10-08',
'source': 'Vermont Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Reported to Vermont Office of the '
'Attorney General'},
'title': 'Data Breach at Dohman, Akerlund & Eddy, LLC',
'type': 'Data Breach'}