On **March 17, 2021**, Gilmore Rees & Carlson, PC experienced a **data breach** reported by the Maine Office of the Attorney General on **July 15, 2021**. The incident involved **unauthorized access** to the law firm’s systems, compromising sensitive personal and financial information of **1,320 individuals**, including **10 Maine residents**. The exposed data included **names, dates of birth, driver’s license numbers, Social Security numbers, and financial account details**—highly sensitive information that could facilitate identity theft, financial fraud, or further targeted cyberattacks. The breach highlights significant vulnerabilities in the firm’s cybersecurity defenses, particularly concerning the protection of **personally identifiable information (PII)** and financial records. Given the nature of the compromised data, affected individuals face heightened risks of **fraud, phishing, and long-term reputational harm**. The incident underscores the critical need for robust access controls, encryption, and proactive monitoring to prevent similar breaches in legal and financial sectors, where client confidentiality is paramount. While the breach did not explicitly mention ransomware or a broader systemic attack, the **scale and sensitivity of the leaked data** suggest severe operational and legal repercussions for the firm, including potential regulatory penalties and loss of client trust.
TPRM report: https://www.rankiteo.com/company/gilmore-rees-&-carlson-p.c.
"id": "gil1016082125",
"linkid": "gilmore-rees-&-carlson-p.c.",
"type": "Breach",
"date": "3/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 1320,
'industry': 'Legal Services',
'name': 'Gilmore Rees & Carlson, PC',
'type': 'Law Firm'}],
'data_breach': {'data_exfiltration': 'Likely (unauthorized access to systems)',
'number_of_records_exposed': 1320,
'personally_identifiable_information': ['names',
'dates of birth',
'driver’s license '
'numbers',
'Social Security '
'numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial Data']},
'date_publicly_disclosed': '2021-07-15',
'description': 'The Maine Office of the Attorney General reported a data '
'breach involving Gilmore Rees & Carlson, PC. The breach '
'involved unauthorized access to systems, affecting 10 Maine '
'residents and a total of 1,320 individuals. The potentially '
'compromised information included names, dates of birth, '
'driver’s license numbers, Social Security numbers, and '
'financial account information.',
'impact': {'data_compromised': ['names',
'dates of birth',
'driver’s license numbers',
'Social Security numbers',
'financial account information'],
'identity_theft_risk': 'High (PII and financial data exposed)',
'payment_information_risk': 'High (financial account information '
'exposed)'},
'references': [{'date_accessed': '2021-07-15',
'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'communication_strategy': 'Public disclosure via Maine Office of '
'the Attorney General'},
'title': 'Data Breach at Gilmore Rees & Carlson, PC',
'type': 'Data Breach'}