Grandfield & Dodd, LLC

The Maine Office of the Attorney General reported that Grandfield & Dodd, LLC experienced a data breach due to unauthorized access to an employee's email account between October 19, 2022, and October 20, 2022. The breach potentially compromised the Social Security number of one Maine resident, with a total of 28 individuals affected. A written notification letter was sent to the affected resident on February 24, 2023, and identity theft protection services were offered for one year.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/fb7acb93-1fc7-44f9-9639-e6a736e0545d.shtml

TPRM report: https://www.rankiteo.com/company/grandfield-&-dodd-llc

"id": "gra431072725",
"linkid": "grandfield-&-dodd-llc",
"type": "Breach",
"date": "10/2022",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': 28,
                        'name': 'Grandfield & Dodd, LLC',
                        'type': 'Company'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'number_of_records_exposed': 1,
                 'personally_identifiable_information': ['Social Security '
                                                         'number'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security number']},
 'date_detected': '2022-10-19',
 'date_publicly_disclosed': '2023-02-24',
 'description': "Unauthorized access to an employee's email account "
                'potentially compromised the Social Security number of one '
                'Maine resident, with a total of 28 individuals affected.',
 'impact': {'data_compromised': ['Social Security number'],
            'identity_theft_risk': 'High',
            'systems_affected': ['Email Account']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'date_accessed': '2023-02-24',
                 'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': ['Written notification letter sent to '
                                         'affected resident'],
              'remediation_measures': ['Identity theft protection services '
                                       'offered for one year']},
 'title': 'Grandfield & Dodd, LLC Data Breach',
 'type': 'Data Breach'}