On April 5, 2021, Wiggin and Dana, a law firm, suffered a security breach that was later confirmed to have compromised sensitive personal data. The incident, identified by July 20, 2021, exposed critical information of five Maine residents, including Social Security numbers, driver’s license details, financial account information, and medical records. The breach posed significant risks, such as identity theft, financial fraud, and unauthorized access to private health data. Affected individuals were formally notified via written correspondence around September 14, 2021, nearly five months after the initial detection. The delayed disclosure and the nature of the exposed data particularly the combination of financial, governmental (SSN, driver’s licenses), and medical records highlight the severity of the incident, as such information is highly valuable to cybercriminals for exploitation in fraudulent activities or further targeted attacks.
TPRM report: https://www.rankiteo.com/company/wiggin-and-dana-llp
"id": "wig1056090725",
"linkid": "wiggin-and-dana-llp",
"type": "Breach",
"date": "4/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '5',
'industry': 'Legal Services',
'location': 'United States (affecting Maine residents)',
'name': 'Wiggin and Dana',
'type': 'Law Firm'}],
'customer_advisories': 'Written notice sent to affected individuals '
'(~2021-09-14)',
'data_breach': {'number_of_records_exposed': '5',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Social Security numbers',
'driver’s licenses',
'financial account information',
'medical information']},
'date_detected': '2021-04-05',
'date_publicly_disclosed': '2021-07-20',
'description': "The Maine Attorney General's Office reported that Wiggin and "
'Dana experienced a security incident on April 5, 2021, which '
'was confirmed to have affected certain files by July 20, '
'2021. The breach potentially compromised sensitive '
'information, including Social Security numbers, driver’s '
'licenses, financial account information, and medical '
'information, affecting five Maine residents. Written notice '
'was provided to the affected individuals on or about '
'September 14, 2021.',
'impact': {'data_compromised': ['Social Security numbers',
'driver’s licenses',
'financial account information',
'medical information'],
'identity_theft_risk': 'High (PII and sensitive data exposed)',
'payment_information_risk': 'High (financial account information '
'exposed)'},
'investigation_status': 'Confirmed (as of 2021-07-20)',
'references': [{'source': "Maine Attorney General's Office"}],
'regulatory_compliance': {'regulatory_notifications': 'Maine Attorney '
"General's Office"},
'response': {'communication_strategy': 'Written notice to affected '
'individuals (sent ~2021-09-14)'},
'title': 'Wiggin and Dana Security Incident (2021)',
'type': 'Data Breach'}