Erickson Demel & Associates, PLLC

On January 14, 2023, Erickson Demel & Associates, PLLC discovered a data breach involving unauthorized access to a user account, which began on January 9, 2023. The incident was reported to the Maine Office of the Attorney General on May 23, 2023. The breach exposed the personal information of approximately 51,858 individuals, including financial account numbers, putting them at risk of identity theft, financial fraud, and other malicious activities. The unauthorized access suggests a potential failure in account security measures, allowing attackers to compromise sensitive customer data. The scale of the breach, combined with the nature of the exposed information, indicates a severe violation of data protection protocols, likely leading to regulatory scrutiny, reputational damage, and potential legal consequences for the firm.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8357008c-a94a-405e-a460-0bd00e98886c.shtml

TPRM report: https://www.rankiteo.com/company/erickson-demel-associates-pllc

"id": "eri300082125",
"linkid": "erickson-demel-associates-pllc",
"type": "Breach",
"date": "1/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '51,858',
                        'industry': 'Legal Services',
                        'name': 'Erickson Demel & Associates, PLLC',
                        'type': 'Law Firm'}],
 'data_breach': {'number_of_records_exposed': '51,858',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              'Financial Account Numbers']},
 'date_detected': '2023-01-14',
 'date_publicly_disclosed': '2023-05-23',
 'description': 'Unauthorized access to a user account at Erickson Demel & '
                'Associates, PLLC, potentially compromising the personal '
                'information of approximately 51,858 individuals, including '
                'financial account numbers.',
 'impact': {'data_compromised': ['Personal Information',
                                 'Financial Account Numbers'],
            'identity_theft_risk': 'High (due to exposure of financial account '
                                   'numbers)',
            'payment_information_risk': 'High'},
 'initial_access_broker': {'entry_point': 'User Account'},
 'references': [{'date_accessed': '2023-05-23',
                 'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': 'Data Breach at Erickson Demel & Associates, PLLC',
 'type': 'Data Breach'}