Pratt & Associates Reports Data Breach Affecting Sensitive Personal Information
Pratt & Associates, a professional services firm, disclosed a data breach to the Maine Attorney General after detecting unusual activity in a single email account on July 30, 2025. An investigation revealed that an unauthorized third party accessed and acquired sensitive personal data from the account as early as July 29, 2025.
The exposed information varies by individual but may include names, Social Security numbers, financial account details, and driver’s license information. Following a review to identify affected parties, Pratt & Associates began mailing breach notification letters to impacted individuals on December 30, 2025. As part of the response, the firm is offering complimentary credit monitoring services to those affected and has provided a detailed list of the compromised data types in the notifications.
The breach notice was filed with the Maine Attorney General, marking the formal disclosure of the incident.
Source: https://straussborrelli.com/2026/01/02/pratt-associates-data-breach-investigation/
Pratt & Associates, APC cybersecurity rating report: https://www.rankiteo.com/company/pratt-associates-apc
"id": "PRA1767397158",
"linkid": "pratt-associates-apc",
"type": "Breach",
"date": "7/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Impacted individuals (number '
'not specified)',
'name': 'Pratt & Associates',
'type': 'Organization'}],
'attack_vector': 'Email Account Compromise',
'customer_advisories': 'Provided complimentary credit monitoring services and '
'a list of specific types of sensitive information '
'impacted',
'data_breach': {'data_exfiltration': 'Confirmed',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Name',
'Social Security number',
'Financial account information',
'Driver’s license information']},
'date_detected': '2025-07-30',
'date_publicly_disclosed': '2025-12-30',
'description': 'Pratt & Associates experienced a data breach where sensitive '
'personal identifiable information may have been compromised. '
'Unusual activity was detected in a single email account, '
'leading to an investigation that confirmed unauthorized '
'access and acquisition of sensitive data.',
'impact': {'data_compromised': 'Sensitive personal identifiable information',
'identity_theft_risk': 'High',
'payment_information_risk': 'High',
'systems_affected': 'Single email account'},
'initial_access_broker': {'entry_point': 'Email account'},
'investigation_status': 'Completed',
'references': [{'source': 'Attorney General of Maine'}],
'regulatory_compliance': {'regulatory_notifications': 'Filed breach '
'notification with the '
'Attorney General of '
'Maine'},
'response': {'communication_strategy': 'Mailed data breach notification '
'letters to impacted individuals'},
'title': 'Pratt & Associates Data Breach',
'type': 'Data Breach'}