Rogin Nassau, LLC

The Vermont Office of the Attorney General disclosed a data breach affecting Rogin Nassau on February 9, 2023. The incident stemmed from unauthorized access to two employee email accounts, occurring between May 23, 2022, and June 1, 2022. While the exact nature of the compromised data remains unspecified, the breach impacted at least two Rhode Island residents, suggesting exposure of personal information. The limited scope (only two individuals) and lack of confirmed financial or highly sensitive data (e.g., financial records, medical data) indicate the breach did not escalate into a large-scale leak or systemic compromise. However, the unauthorized access to corporate email accounts raises concerns about potential phishing, credential theft, or internal policy lapses, though no further details on the attacker’s motives or methods were provided. The incident underscores vulnerabilities in email security protocols but does not suggest broader operational disruption or existential threats to the organization.

Source: https://ago.vermont.gov/document/2023-02-09-rogin-nassau-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/rogin-nassau-llc

"id": "rog042091825",
"linkid": "rogin-nassau-llc",
"type": "Breach",
"date": "5/2022",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"

{'affected_entities': [{'customers_affected': '2 Rhode Island residents',
                        'name': 'Rogin Nassau',
                        'type': 'Organization'}],
 'data_breach': {'personally_identifiable_information': True},
 'date_publicly_disclosed': '2023-02-09',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach incident involving Rogin Nassau on February 9, 2023. '
                'The incident involved unauthorized access to two email '
                'accounts, affecting 2 Rhode Island residents, and occurred '
                'between May 23, 2022 and June 1, 2022. The types of personal '
                'information compromised are unspecified.',
 'impact': {'data_compromised': True, 'systems_affected': ['2 email accounts']},
 'references': [{'date_accessed': '2023-02-09',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Vermont Office of the '
                                                        'Attorney General']},
 'title': 'Data Breach at Rogin Nassau Affecting Email Accounts',
 'type': 'Data Breach'}