Lamont Hanley & Associates, Inc.

On May 2, 2024, the Maine Attorney General's Office disclosed a data breach affecting Lamont Hanley & Associates, Inc., stemming from unauthorized access to an employee’s email account on June 20, 2023. The incident exposed sensitive personal information of 11,484 individuals, including 21 New Hampshire residents. The compromised data primarily included names and Social Security Numbers (SSNs), which are high-value targets for identity theft and fraud.The breach highlights vulnerabilities in email security protocols, potentially enabling threat actors to exploit the exposed SSNs for financial fraud, credit applications, or other malicious activities. While the exact method of unauthorized access (e.g., phishing, credential stuffing) was not specified, the scale of the breach impacting over 11,000 individuals underscores significant risks to affected parties, including long-term identity theft and reputational harm to the company. The delayed disclosure (nearly a year post-breach) may further exacerbate regulatory and public trust concerns.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/71d23eb5-9010-4a46-adc3-77e78d234825.shtml

TPRM report: https://www.rankiteo.com/company/lamont-hanley-assoc-inc

"id": "lam724082025",
"linkid": "lamont-hanley-assoc-inc",
"type": "Breach",
"date": "6/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 11484,
                        'name': 'Lamont Hanley & Associates, Inc.',
                        'type': 'Organization'}],
 'attack_vector': 'Unauthorized Access (Email Account Compromise)',
 'data_breach': {'number_of_records_exposed': 11484,
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_publicly_disclosed': '2024-05-02',
 'description': "The Maine Attorney General's Office reported a data breach "
                'involving Lamont Hanley & Associates, Inc. The breach '
                'involved unauthorized access to an employee email account, '
                'potentially affecting 11,484 individuals, including 21 '
                'residents of New Hampshire. The compromised information '
                'included names and Social Security Numbers.',
 'impact': {'data_compromised': ['Names', 'Social Security Numbers'],
            'identity_theft_risk': 'High (SSNs compromised)',
            'systems_affected': ['Employee Email Account']},
 'initial_access_broker': {'entry_point': 'Employee Email Account'},
 'references': [{'date_accessed': '2024-05-02',
                 'source': "Maine Attorney General's Office"}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Attorney '
                                                        "General's Office"]},
 'response': {'communication_strategy': 'Public disclosure via Maine Attorney '
                                        "General's Office"},
 'title': 'Lamont Hanley & Associates, Inc. Data Breach (2023)',
 'type': 'Data Breach'}