McCarthy Fingar, LLP

The law firm McCarthy Fingar, LLP experienced a data breach between April 6, 2023, and April 21, 2023, due to unauthorized external access to its systems. The incident was reported to the Maine Office of the Attorney General on December 22, 2023, affecting 1,216 individuals, including 2 Maine residents. The compromised data included Social Security Numbers (SSNs), which are highly sensitive and can lead to severe identity theft risks, financial fraud, or long-term reputational harm for the affected individuals. As a law firm, the breach raises concerns about client confidentiality, regulatory compliance (e.g., data protection laws), and potential legal liabilities. The delayed disclosure (nearly 8 months after the breach) may further exacerbate trust issues with clients and regulatory bodies. The exposure of SSNs critical for financial and personal identification positions this as a high-stakes incident with lasting consequences for both the firm and the victims.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6e2008ff-b454-421f-8854-24c7157d89fa.shtml

TPRM report: https://www.rankiteo.com/company/mccarthy-fingar-llp

"id": "mcc524082125",
"linkid": "mccarthy-fingar-llp",
"type": "Breach",
"date": "4/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1216,
                        'industry': 'Legal Services',
                        'name': 'McCarthy Fingar, LLP',
                        'type': 'Law Firm'}],
 'attack_vector': 'Unauthorized External Access',
 'data_breach': {'number_of_records_exposed': 1216,
                 'personally_identifiable_information': ['Social Security '
                                                         'Numbers (SSNs)'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)']},
 'date_publicly_disclosed': '2023-12-22',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving McCarthy Fingar, LLP on December 22, 2023. '
                'The breach occurred from April 6, 2023, to April 21, 2023, '
                'due to unauthorized external access, affecting 1,216 '
                'individuals, including 2 residents. The compromised '
                'information included Social Security Numbers (SSNs).',
 'impact': {'data_compromised': ['Social Security Numbers (SSNs)'],
            'identity_theft_risk': 'High (SSNs compromised)'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'title': 'Data Breach at McCarthy Fingar, LLP',
 'type': 'Data Breach'}