The Maine Office of the Attorney General reported a data breach involving Todd & Weld LLP on March 26, 2025. The breach occurred due to unauthorized access to two employee email accounts from September 30, 2024, to October 23, 2024, affecting 174 individuals, of which 2 are residents of Maine. The compromised information included personal data, and identity theft protection services were offered for 12 months through IDX.
TPRM report: https://www.rankiteo.com/company/todd-&-weld-llp
"id": "tod430072925",
"linkid": "todd-&-weld-llp",
"type": "Breach",
"date": "9/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': 174,
'industry': 'Legal',
'name': 'Todd & Weld LLP',
'type': 'Law Firm'}],
'attack_vector': 'Unauthorized Access',
'data_breach': {'number_of_records_exposed': 174,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal Data'},
'date_detected': '2024-10-23',
'date_publicly_disclosed': '2025-03-26',
'description': 'Unauthorized access to two employee email accounts '
'compromised personal data of 174 individuals, including 2 '
'residents of Maine.',
'impact': {'data_compromised': 'Personal Data',
'identity_theft_risk': 'High',
'systems_affected': 'Email Accounts'},
'initial_access_broker': {'entry_point': 'Email Accounts'},
'post_incident_analysis': {'corrective_actions': 'Offering Identity Theft '
'Protection Services',
'root_causes': 'Unauthorized Access to Email '
'Accounts'},
'references': [{'date_accessed': '2025-03-26',
'source': 'Maine Office of the Attorney General'}],
'response': {'remediation_measures': 'Identity Theft Protection Services',
'third_party_assistance': 'IDX'},
'title': 'Data Breach at Todd & Weld LLP',
'type': 'Data Breach',
'vulnerability_exploited': 'Email Account Compromise'}