McElroy Deutsch Reports Data Breach Impacting Sensitive Personal and Health Information
McElroy Deutsch, a professional services firm, disclosed a data breach in which unauthorized access to sensitive personal and protected health information may have occurred. The company first detected the cyberattack on April 3, 2025, prompting an immediate investigation.
The breach, which took place between March 28 and April 1, 2025, involved potential exposure of a range of personal data, including:
- Names
- Social Security numbers
- Driver’s license numbers
- Financial account and payment card details
- Health insurance and medical information
Following a review to identify affected individuals, McElroy Deutsch published a breach notice on its website. On December 19, 2025, the firm began mailing notification letters to impacted parties, detailing the specific types of compromised information. The incident underscores the ongoing risks of cyber threats targeting sensitive data in professional and healthcare-related sectors.
Source: https://straussborrelli.com/2025/12/22/mcelroy-deutsch-mulvaney-carpenter-data-breach-investigation/
McElroy Deutsch TPRM report: https://www.rankiteo.com/company/mcelroy-deutsch-mulvaney-&-carpenter-llp
"id": "mce1766447679",
"linkid": "mcelroy-deutsch-mulvaney-&-carpenter-llp",
"type": "Breach",
"date": "4/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Impacted individuals identified '
'through review',
'industry': 'Legal Services',
'name': 'McElroy Deutsch',
'type': 'Law Firm'}],
'customer_advisories': 'Data breach notification letters mailed to impacted '
'individuals on December 19, 2025',
'data_breach': {'personally_identifiable_information': ['Name',
'Social Security '
'number',
'Driver’s license '
'number',
'Financial account '
'information',
'Payment card '
'information',
'Health insurance '
'information',
'Medical information'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Identifiable '
'Information',
'Protected Health Information']},
'date_detected': '2025-04-03',
'date_publicly_disclosed': '2025-12-19',
'description': 'McElroy Deutsch experienced a data breach in which sensitive '
'personal identifiable information and protected health '
'information may have been compromised. The breach was '
'discovered on April 3, 2025, and an investigation confirmed '
'unauthorized access to sensitive data between March 28 and '
'April 1, 2025.',
'impact': {'data_compromised': 'Sensitive personal identifiable information '
'and protected health information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High'},
'investigation_status': 'Completed',
'references': [{'source': 'McElroy Deutsch Breach Notice'}],
'response': {'communication_strategy': 'Website breach notice and mailed data '
'breach notification letters',
'incident_response_plan_activated': 'Yes'},
'title': 'McElroy Deutsch Data Breach',
'type': 'Data Breach'}