Moye White, LLP

On May 5, 2020, Moye White LLP experienced an external system breach (hacking) that exposed sensitive personal information of 327 individuals, including at least one Maine resident. The compromised data included driver’s license numbers, which are highly sensitive identifiers often targeted for identity theft. While the breach was discovered internally, the incident was reported to the Maine Office of the Attorney General on September 17, 2020, indicating a delayed disclosure. Affected individuals were offered two years of identity theft protection services through Experian as a remedial measure. The breach did not specify whether financial data, medical records, or other critical personal details were exposed beyond driver’s license numbers. However, the exposure of such information poses a significant risk of identity fraud, financial exploitation, or reputational harm to the impacted individuals. The firm’s response included mitigation efforts, but the incident highlights vulnerabilities in their cybersecurity defenses against external hacking attempts.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/306a1beb-b425-4009-a4fe-cc1c218ba23e.shtml

TPRM report: https://www.rankiteo.com/company/mgwl

"id": "mgw520082125",
"linkid": "mgwl",
"type": "Breach",
"date": "1/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 327,
                        'industry': 'Legal Services',
                        'name': 'Moye White LLP',
                        'type': 'Law Firm'}],
 'attack_vector': 'Hacking (External System Breach)',
 'customer_advisories': 'Identity theft protection services (Experian) offered '
                        'to affected individuals for two years',
 'data_breach': {'data_exfiltration': 'Likely (personal data exposed)',
                 'number_of_records_exposed': 327,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personal Information',
                                              "Driver's License Numbers"]},
 'date_detected': '2020-05-05',
 'date_publicly_disclosed': '2020-09-17',
 'description': 'An external system breach (hacking) at Moye White LLP exposed '
                "sensitive personal information, including driver's license "
                'numbers, of 327 individuals. The breach was discovered on May '
                '5, 2020, and reported to the Maine Office of the Attorney '
                'General on September 17, 2020. Affected individuals were '
                'offered two years of identity theft protection services from '
                'Experian.',
 'impact': {'brand_reputation_impact': 'Potential negative impact due to '
                                       'exposure of sensitive personal data',
            'data_compromised': ["Driver's License Numbers"],
            'identity_theft_risk': 'High (sensitive personal information '
                                   'exposed)'},
 'investigation_status': 'Reported; details on investigation not provided',
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'communication_strategy': 'Notification to affected individuals '
                                        'and regulatory disclosure (Maine '
                                        'Office of the Attorney General)',
              'third_party_assistance': ['Experian (Identity Theft Protection '
                                         'Services)']},
 'title': 'Moye White LLP Data Breach (2020)',
 'type': 'Data Breach'}