Kaufman Dolowich & Voluck LLP

Kaufman Dolowich & Voluck LLP, a law firm, suffered a data breach between January 28, 2021, and April 11, 2021, which was detected on August 19, 2021. The incident involved unauthorized access to employee email accounts, exposing sensitive personal data of 403 individuals, including 9 Maine residents. The compromised information included names and Social Security numbers (SSNs), which are high-risk identifiers for identity theft and fraud. The firm issued written notifications on December 30, 2021, and offered 12 months of identity theft protection services via Experian to affected individuals. The breach highlights vulnerabilities in email security, potentially leading to long-term risks for the exposed individuals, including financial fraud, credit damage, and misuse of personal data. The delayed discovery (over four months after the breach period) further exacerbates the severity, as attackers had prolonged access to sensitive communications and employee credentials.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/8cec0721-17a9-4dfc-8b8c-3c8c7f7c06b2.shtml

TPRM report: https://www.rankiteo.com/company/kaufmandolowich

"id": "kau743082025",
"linkid": "kaufmandolowich",
"type": "Breach",
"date": "1/2021",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 403,
                        'industry': 'Legal Services',
                        'name': 'Kaufman Dolowich & Voluck LLP',
                        'type': 'Law Firm'}],
 'attack_vector': 'Unauthorized Access (Email Account Compromise)',
 'customer_advisories': 'Written notification provided to affected individuals '
                        'on December 30, 2021, with 12 months of identity '
                        'theft protection services offered via Experian.',
 'data_breach': {'number_of_records_exposed': 403,
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_detected': '2021-08-19',
 'date_publicly_disclosed': '2021-12-30',
 'description': 'The Maine Office of the Attorney General reported that '
                'Kaufman Dolowich & Voluck LLP experienced a data breach '
                'between January 28, 2021, and April 11, 2021. The breach '
                'involved unauthorized access to employee email accounts, '
                'potentially affecting 403 individuals, including 9 Maine '
                'residents, and compromising names and Social Security '
                'numbers. Written notification was provided on December 30, '
                '2021, and identity theft protection services through Experian '
                'were offered for 12 months.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'identity_theft_risk': 'High (PII exposed)',
            'systems_affected': ['Employee Email Accounts']},
 'initial_access_broker': {'entry_point': 'Employee Email Accounts'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Written Notification to Affected '
                                        'Individuals',
              'third_party_assistance': ['Experian (Identity Theft Protection '
                                         'Services)']},
 'title': 'Kaufman Dolowich & Voluck LLP Data Breach (2021)',
 'type': 'Data Breach'}