Scott & Kraus Reports Data Breach Impacting Sensitive Personal Information
Scott & Kraus, a U.S.-based firm, disclosed a data breach to the Maine Attorney General after an unauthorized third party accessed sensitive personal information in its systems. The incident began on February 27, 2025, when the company experienced an IT outage disrupting local systems, prompting an internal investigation.
The investigation confirmed that an unauthorized actor may have acquired personal data during the breach. A subsequent review, completed on December 16, 2025, determined that exposed information varied by individual but included names, Social Security numbers, driver’s license details, and financial account information.
On December 22, 2025, Scott & Kraus began notifying affected individuals via mail, providing details on the compromised data and offering complimentary credit monitoring services. The breach notice filed with the Maine Attorney General outlines the scope of the incident and the steps taken in response.
Source: https://straussborrelli.com/2025/12/29/scott-kraus-data-breach-investigation/
Meyer, Unkovic & Scott LLP cybersecurity rating report: https://www.rankiteo.com/company/meyer-unkovic-&-scott-llp
"id": "MEY1767031093",
"linkid": "meyer-unkovic-&-scott-llp",
"type": "Breach",
"date": "2/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Impacted individuals (exact '
'number not specified)',
'industry': 'Legal',
'name': 'Scott & Kraus',
'type': 'Company'}],
'customer_advisories': 'Provided affected individuals with a list of specific '
'types of sensitive information impacted and '
'complimentary credit monitoring services',
'data_breach': {'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Name',
'Social Security number',
'Driver’s license information',
'Financial account information']},
'date_detected': '2025-02-27',
'date_publicly_disclosed': '2025-12-22',
'description': 'Scott & Kraus experienced a data breach in which sensitive '
'personal identifiable information may have been compromised. '
'An IT outage on February 27, 2025, disrupted access to '
'certain local systems, leading to an investigation that '
'confirmed unauthorized access and acquisition of sensitive '
'data.',
'impact': {'data_compromised': 'Sensitive personal identifiable information',
'identity_theft_risk': 'High',
'operational_impact': 'IT outage disrupting access to systems',
'payment_information_risk': 'High',
'systems_affected': 'Certain local systems'},
'investigation_status': 'Completed',
'references': [{'source': 'Attorney General of Maine'}],
'regulatory_compliance': {'regulatory_notifications': 'Filed breach '
'notification with the '
'Attorney General of '
'Maine'},
'response': {'communication_strategy': 'Mailed data breach notification '
'letters to impacted individuals'},
'title': 'Scott & Kraus Data Breach',
'type': 'Data Breach'}