Grant Street Group, LLC
bd_0c15dc64b6d46fa7 · schema v1 · pii pii-v2
Full breach record for Grant Street Group, LLC →Grant Street Group, LLC notified Massachusetts residents of a data security incident involving a former third-party service provider, Blank Rome LLP. On May 21, 2026, an attorney at Blank Rome was misled via social engineering into uploading files containing personal information (including W-9 forms with names, SSNs, addresses, and signatures) to an external Google Drive folder. The files were deleted within hours. Grant Street was informed on September 11, 2026. The firm ended its relationship with Blank Rome and is offering two years of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
May 21, 2026
Begins
Sep 11, 2026
Discovered
Oct 1, 2026
Filed
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.