McClallen Reports Data Breach Impacting Sensitive Personal Information
McClallen, a Vermont-based organization, disclosed a data breach involving unauthorized access to sensitive personal identifiable information (PII) stored in two employee email accounts. The incident occurred between December 1 and December 18, 2025, prompting an internal investigation to assess the scope of exposure.
While the exact types of compromised data remain undisclosed as of February 23, 2026, Vermont state guidelines define "personal information" as potentially including names, Social Security numbers, government-issued IDs, financial account details, biometric data, genetic information, and health records. McClallen has since begun notifying affected individuals via mail, providing details on the exposed data and offering complimentary credit monitoring services.
The breach was reported to the Vermont Attorney General, though the full extent of the impact including the number of individuals affected has not been publicly confirmed. Further updates may follow as the investigation continues.
Source: https://straussborrelli.com/2026/02/23/mcclallen-law-data-breach-investigation/
McClallen TPRM report: https://www.rankiteo.com/company/mcclallenlaw
"id": "mcc1771973113",
"linkid": "mcclallenlaw",
"type": "Breach",
"date": "2/2026",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'location': 'Vermont, USA',
'name': 'McClallen',
'type': 'Organization'}],
'attack_vector': 'Unauthorized access to employee email accounts',
'customer_advisories': 'Mail notifications to affected individuals with '
'details on exposed data and complimentary credit '
'monitoring services',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Social Security numbers',
'Government-issued IDs',
'Financial account details',
'Biometric data',
'Genetic information',
'Health records']},
'date_detected': '2025-12-18',
'date_publicly_disclosed': '2026-02-23',
'description': 'McClallen, a Vermont-based organization, disclosed a data '
'breach involving unauthorized access to sensitive personal '
'identifiable information (PII) stored in two employee email '
'accounts. The incident occurred between December 1 and '
'December 18, 2025, prompting an internal investigation to '
'assess the scope of exposure.',
'impact': {'data_compromised': 'Sensitive personal identifiable information '
'(PII)',
'identity_theft_risk': 'High',
'payment_information_risk': 'Possible',
'systems_affected': 'Two employee email accounts'},
'investigation_status': 'Ongoing',
'references': [{'source': 'Vermont Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Reported to Vermont '
'Attorney General'},
'response': {'communication_strategy': 'Mail notifications to affected '
'individuals',
'remediation_measures': 'Notifying affected individuals, '
'offering complimentary credit '
'monitoring services'},
'title': 'McClallen Data Breach Impacting Sensitive Personal Information',
'type': 'Data Breach'}