McMillan Metro, P.C.

McMillan Metro, P.C. suffered a data breach caused by external system hacking between September 21–24, 2021, compromising the personal information of 1,728 individuals, including at least one Maine resident. The breach was discovered nearly a year later on August 11, 2022, with notifications to affected parties issued on November 7, 2022. The incident involved unauthorized access to sensitive data, though the exact nature of the exposed information (e.g., financial, medical, or personally identifiable details) was not explicitly detailed in the report. The delayed detection and response suggest potential vulnerabilities in the company’s cybersecurity monitoring and incident response protocols. The breach highlights risks associated with third-party intrusions, emphasizing the need for robust defensive measures to prevent similar future incidents.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5cb1cc10-49f4-4eed-8af9-b467512c14f5.shtml

TPRM report: https://www.rankiteo.com/company/mcmillanmetro

"id": "mcm042091825",
"linkid": "mcmillanmetro",
"type": "Breach",
"date": "9/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 1728,
                        'name': 'McMillan Metro, P.C.',
                        'type': 'Organization'}],
 'attack_vector': 'External System Hacking',
 'customer_advisories': 'Notification letters sent to affected individuals on '
                        'November 7, 2022',
 'data_breach': {'number_of_records_exposed': 1728},
 'date_detected': '2022-08-11',
 'date_publicly_disclosed': '2022-11-07',
 'description': 'The Maine Office of the Attorney General reported that '
                'McMillan Metro, P.C. experienced a data breach due to '
                'external system hacking between September 21, 2021, and '
                'September 24, 2021, affecting a total of 1,728 individuals, '
                'including one (1) Maine resident. The breach was discovered '
                'on August 11, 2022, and McMillan Metro began notifying '
                'affected individuals on November 7, 2022.',
 'impact': {'data_compromised': True},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Maine Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Notification to affected individuals'},
 'title': 'McMillan Metro, P.C. Data Breach (2021)',
 'type': 'Data Breach'}