Monroe, Sweeris & Tromp PLC

The Maine Office of the Attorney General reported that Monroe, Sweeris & Tromp PLC (MS&T) experienced a data breach due to unauthorized access to an employee's email account from May 11, 2020 to May 14, 2020. Approximately 1,541 individuals were affected by this breach, which included Social Security numbers. Written notifications were sent to affected individuals on or about October 5, 2020, and MS&T offered 12 months of identity theft protection services through Experian.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/aca1da25-3f0a-45ac-9154-59b369fac90d.shtml

TPRM report: https://www.rankiteo.com/company/monroe-sweeris-and-tromp-plc

"id": "mon344080525",
"linkid": "monroe-sweeris-and-tromp-plc",
"type": "Breach",
"date": "5/2020",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 1541,
                        'industry': 'Legal',
                        'name': 'Monroe, Sweeris & Tromp PLC',
                        'type': 'Law Firm'}],
 'attack_vector': 'Email Account Compromise',
 'data_breach': {'number_of_records_exposed': 1541,
                 'personally_identifiable_information': ['Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Social Security numbers']},
 'date_detected': '2020-05-11',
 'date_publicly_disclosed': '2020-10-05',
 'description': "Unauthorized access to an employee's email account resulted "
                'in a data breach affecting approximately 1,541 individuals, '
                'including exposure of Social Security numbers.',
 'impact': {'data_compromised': ['Social Security numbers']},
 'initial_access_broker': {'entry_point': 'Email Account'},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'response': {'communication_strategy': ['Written notifications sent to '
                                         'affected individuals'],
              'remediation_measures': ['Offered 12 months of identity theft '
                                       'protection services through Experian']},
 'title': 'Data Breach at Monroe, Sweeris & Tromp PLC',
 'type': 'Data Breach'}