The Maine Office of the Attorney General disclosed a data breach at Iannuzzi, Manetta & Co., P.C., detected on December 17, 2024, but originating from July 15, 2024. The incident involved unauthorized access to client data due to network encryption by unknown threat actors, compromising the personal information of 25,845 individuals, including 6 Maine residents. While the exact type of data exposed was not specified, the breach prompted the firm to offer 24 months of identity theft protection services to affected parties. The delay in discovery (over 5 months) suggests a prolonged exposure window, increasing risks of misuse like fraud or identity theft. The breach underscores vulnerabilities in the firm’s cybersecurity defenses, particularly against encryption-based attacks, which may indicate ransomware or sophisticated cyber intrusion tactics. No ransom demands were explicitly mentioned, but the scale and sensitivity of the leaked data—likely including client financial or personal details—align with high-severity incidents requiring regulatory disclosure and remediation efforts.
TPRM report: https://www.rankiteo.com/company/iannuzzi-manetta
"id": "ian951082125",
"linkid": "iannuzzi-manetta",
"type": "Breach",
"date": "7/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '25,845 individuals (including 6 '
'Maine residents)',
'industry': 'Financial/Accounting Services',
'name': 'Iannuzzi, Manetta & Co., P.C.',
'type': 'Accounting Firm'}],
'customer_advisories': 'Identity theft protection services offered for 24 '
'months',
'data_breach': {'data_encryption': 'Yes (network encryption by threat actors)',
'data_exfiltration': 'Likely (unauthorized access to client '
'data)',
'number_of_records_exposed': '25,845',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (personally identifiable '
'information)',
'type_of_data_compromised': 'Client data (personally '
'identifiable information)'},
'date_detected': '2024-07-15',
'date_publicly_disclosed': '2024-12-17',
'description': 'The Maine Office of the Attorney General reported that '
'Iannuzzi, Manetta & Co., P.C. experienced a data breach '
'incident on December 17, 2024, affecting 25,845 individuals, '
'including 6 residents of Maine. The breach involved '
'unauthorized access to client data due to network encryption '
'by unknown threat actors, which was discovered to have '
'occurred on July 15, 2024. Identity theft protection services '
'are being offered for 24 months following the incident.',
'impact': {'brand_reputation_impact': 'Potential reputational damage '
'(identity theft protection services '
'offered)',
'data_compromised': 'Client data (including personally '
'identifiable information)',
'identity_theft_risk': 'High (identity theft protection services '
'offered for 24 months)'},
'ransomware': {'data_encryption': 'Yes (network encryption)',
'data_exfiltration': 'Likely'},
'references': [{'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
'Attorney General'},
'response': {'remediation_measures': 'Offering identity theft protection '
'services for 24 months'},
'threat_actor': 'Unknown',
'title': 'Data Breach at Iannuzzi, Manetta & Co., P.C.',
'type': 'Data Breach'}