THOMPSON COBURN LLP

Thompson Coburn, LLP notified individuals of a cybersecurity incident where unauthorized actors accessed files containing names and other personal information between May 28-29, 2024. The firm engaged forensic specialists, reviewed affected files, and offered credit monitoring services. The incident is contained.

THOMPSON COBURN LLP filed a data-breach notice with the Illinois Attorney General in May 2025 (case 25-05-172). The register records the breach as discovered on May 29, 2024. Personal information types reported: drivers license, financial account number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

Thompson Coburn LLP notified individuals of a cybersecurity incident where unauthorized actors accessed files containing personal information between May 28-29, 2024. The firm engaged forensic specialists, implemented additional security measures, and offered credit monitoring services.

Thompson Coburn LLP reported a data breach to the Indiana Attorney General. The breach occurred on 2024-05-28 and was reported on 2025-04-30. 1,557 Indiana residents were affected. 67,026 individuals affected in total.

Thompson Coburn LLP reported an external system breach (hacking) occurring May 28-29, 2024. The firm discovered suspicious activity on May 29, 2024. The incident compromised names and Social Security numbers of approximately 67,026 individuals, including 59 Maine residents. Thompson Coburn engaged forensic specialists, notified law enforcement, and provided one year of credit monitoring through Equifax.

Thompson Coburn LLP notified consumers of a data breach where unauthorized actors accessed and acquired information from the firm's network between May 28-29, 2024. The incident involved the viewing or taking of client data, including names and government identifiers. The firm engaged forensic specialists, reviewed affected files, and implemented additional cybersecurity measures. Credit monitoring services were offered to affected individuals.

Thompson Coburn LLP experienced unauthorized access to its network between May 28 and May 29, 2024. The firm became aware of suspicious activity on May 29, 2024. An investigation determined that an unauthorized actor viewed or took certain information, including names and potentially other personal data, from files stored in the firm's environment. The firm engaged third-party forensic specialists, reviewed affected files, implemented additional cybersecurity measures, and is offering credit monitoring to impacted individuals.

Thompson Coburn LLP, a law firm, disclosed a cybersecurity incident affecting approximately 52 Nebraska residents. Unauthorized access occurred between May 28-29, 2024, resulting in the exfiltration of names and Social Security numbers. The firm engaged forensic specialists, notified law enforcement, and provided one year of credit monitoring via Equifax to affected individuals.

Thompson Coburn LLP reported unauthorized access to its network between May 28-29, 2024, discovered on May 29, 2024. The incident involved the viewing or taking of client data, including names and other PII, by an unauthorized actor. Thompson Coburn notified federal law enforcement, engaged forensic specialists, and provided credit monitoring services. Notices were sent to affected individuals starting December 31, 2024.

Thompson Coburn LLP notified New Hampshire AG of unauthorized access to client data between May 28-29, 2024. Suspicious activity detected May 29. One NH resident affected. Name and basic PII exposed. Response included forensic investigation, law enforcement notification, credit monitoring via Equifax, and security policy reviews.

Thompson Coburn LLP reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-12-31. 310 Massachusetts residents were affected.

Thompson Coburn LLP notified consumers of a data breach where unauthorized actors accessed files containing names, government IDs, and financial account numbers between May 28-29, 2024. The firm engaged forensic specialists, reviewed affected files, and offered credit monitoring services.

Thompson Coburn LLP reported an external system breach (hacking) occurring May 28-29, 2024. The firm discovered suspicious activity on May 29, 2024. The incident compromised names and Social Security numbers of approximately 7,502 individuals, including one Maine resident. Thompson Coburn engaged forensic specialists, notified law enforcement, and provided one year of credit monitoring services.

Thompson Coburn LLP reported to HHS on 2024-11-04 a Hacking/IT Incident affecting 305,088 individuals. Breached information located on Network Server. The business associate experienced a ransomware attack affecting electronic protected health information (ePHI) including demographic, clinical, and financial data. Corrective actions included improving cybersecurity and providing HIPAA training.

Engle Martin & Associates, an insurance claims administrator, notified the NH AG of a security incident where an unauthorized user accessed a limited number of employee email accounts via phishing. The breach exposed PII, SSNs, financial info, and PHI of employees and claimants. 4 NH residents were notified on Feb 14, 2018. Forensics were engaged, passwords reset, and 1 year of credit monitoring provided.

Weaver & Tidwell, LLP notified the NH AG of a data incident where an unauthorized user accessed a partner's CCH Client Axcess account by guessing a security question on Jan 10, 2018. Documents containing names, SSNs, and financial account info were downloaded. 2 NH residents affected. Notifications sent Feb 9, 2018. MFA enabled and credit monitoring offered.

DiFilippo Corporate Finance Group, Inc. notified the NH Attorney General of a phishing incident affecting one NH resident. Unauthorized access to an employee email account occurred Dec 5-14, 2017, exposing names and SSNs. Discovery was Dec 14, 2017. Notifications sent Feb 2, 2018. Remediation included password resets, security enhancements, employee training, and credit monitoring.

Red Roof Inns reported a data breach involving its third-party vendor Sabre Hospitality Solutions (SHS). Unauthorized access occurred on August 10, 2016, discovered by SHS on June 6, 2017. The incident exposed customer names, addresses, emails, phone numbers, and credit/debit card details (including CVV). 25 New Hampshire residents were notified on August 28, 2017. Law enforcement was contacted.

Marine Corps Association & Foundation notified NH AG of a third-party vendor compromise affecting its online store. Unauthorized access occurred between April 16 and June 19, 2017, exposing names, addresses, phone numbers, credit/debit card info, and credentials for 30 NH residents. Notification sent August 11, 2017.

Capital First Trust Company notified the NH AG of a security incident where an unauthorized user accessed two user accounts containing client PII (names, SSNs, driver's licenses, account numbers). One NH resident affected. Notification sent May 10, 2017. Forensics engaged; enhanced security measures implemented; credit monitoring offered.

Ambassador Title Service and Accurate Title Company experienced a data security incident in December 2016, discovered on Dec 25, 2016. The incident potentially exposed names, SSNs, and financial account information for 6 New Hampshire residents. Notices were sent on Feb 28, 2017. The companies engaged forensic investigators, notified law enforcement, and offered 1 year of credit monitoring.

Guilmartin, DiPiro & Sokolowski, LLC (GDS), an accounting firm, experienced a data breach after a tax-preparation software partner alerted GDS to a fraudulent tax return filed using GDS' account info. GDS discovered the incident on Oct 17, 2016. Forensics confirmed unauthorized access to a server and exfiltration of PII (names, SSNs, addresses, wage info, bank account info) for 14 NH residents. Notifications were mailed Dec 1-6, 2016. GDS engaged forensic investigators, a cybersecurity firm for risk assessment, and offered 24 months of credit monitoring via Kroll. FBI and IRS were notified.

Santoro CPA and SimpleBooks Corp. reported a security incident discovered on July 21, 2016, after clients received unsolicited IRS communications. Forensic analysis revealed unauthorized access to client data including names, SSNs, and payroll info. One NH resident was affected. The firm hired forensic investigators, notified the IRS and credit bureaus, and offered two years of credit monitoring.

Mate1.com notified Washington AG of a security incident where an unauthorized individual accessed user profile data (name, username, password) in October 2015. Incident discovered April 14, 2016. 406,080 WA residents affected. Notifications sent June 2-6, 2016. Remediation included encryption and security measures.