Grandizio Wilkins Little & Matthews, LLP

The Maine Office of the Attorney General reported a data breach involving Grandizio Wilkins Little & Matthews, LLP on January 14, 2022. The breach occurred on June 7, 2021, due to unauthorized access (hacking) to an employee's email account, affecting approximately 7 Montana residents whose personal information, including names and financial account numbers, may have been compromised. Identity theft protection services, including 12 months of credit monitoring, were offered to affected individuals.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5d5ab86c-de3b-4f16-87b7-9006ddf8c618.shtml

TPRM report: https://www.rankiteo.com/company/grandizio-wilkins-little-&-matthews-llp

"id": "gra1001072825",
"linkid": "grandizio-wilkins-little-&-matthews-llp",
"type": "Breach",
"date": "6/2021",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 7,
                        'industry': 'Legal',
                        'name': 'Grandizio Wilkins Little & Matthews, LLP',
                        'type': 'Law Firm'}],
 'attack_vector': 'Unauthorized Access (Hacking)',
 'data_breach': {'number_of_records_exposed': 7,
                 'personally_identifiable_information': 'Yes',
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Names',
                                              'Financial Account Numbers']},
 'date_detected': '2022-01-14',
 'date_publicly_disclosed': '2022-01-14',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Grandizio Wilkins Little & Matthews, LLP on '
                'January 14, 2022. The breach occurred on June 7, 2021, due to '
                "unauthorized access (hacking) to an employee's email account, "
                'affecting approximately 7 Montana residents whose personal '
                'information, including names and financial account numbers, '
                'may have been compromised. Identity theft protection '
                'services, including 12 months of credit monitoring, were '
                'offered to affected individuals.',
 'impact': {'data_compromised': ['Names', 'Financial Account Numbers'],
            'identity_theft_risk': 'High',
            'payment_information_risk': 'High'},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'post_incident_analysis': {'root_causes': 'Unauthorized Access (Hacking)'},
 'references': [{'date_accessed': '2022-01-14',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'remediation_measures': ['Identity Theft Protection Services',
                                       '12 Months of Credit Monitoring']},
 'title': 'Data Breach at Grandizio Wilkins Little & Matthews, LLP',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Email Account'}