Troutman Pepper Locke, LLP
ent_019e10f3b93c13e27b191831c867b141
Disclosures
19
State AG · Leak Site · 9 jurisdictions
Multi-filing incidents
11
incidents joining 2+ filings here
Max affected reported
63,358
nationwide · State AG TX
Leak-site claims
1
unverified actor claims
Identity resolution
- Canonical name
- Troutman Pepper Locke, LLP
- Normalized
- troutman pepper locke— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- 549300JSROBCO5R85B10
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (19)newest first
- Texas State AGas victim2026-10-30
Troutman Pepper Locke LLP based in Atlanta, Georgia, a other entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-08-07 and reported on 2026-10-30. 4,194 Texas residents were affected. 63,358 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information. Consumers were notified via U.S. Mail.
- Vermont State AGas victim2026-10-28
Troutman Pepper Locke LLP reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-10-28. The reporting organization type is Other Commercial. 24 Vermont residents were affected. Categories of data breached: Social Security Numbers.
- California State AGas victim2026-10-28
Troutman Pepper Locke LLP reported a security incident on August 7, 2026, where an employee was targeted by a social engineering attack and mistakenly sent documents containing personal information (name and variable data) to an unauthorized person. The firm engaged third-party cybersecurity specialists and notified the FBI. Complimentary credit monitoring and identity protection services are being offered for 24 months.
- GLOBALLeak Siteas victim2026-08-18
2nd time we attacked them in a year (first time through physical intrusion), will continue our attacks...
- Maryland State AGas reporting2026-04-23
Wolf Creek Water and Sewer Improvement District notified the Maryland AG of a security incident affecting 2 individuals. Unauthorized access to an employee's email account occurred around September 17, 2024, likely via phishing. Data exposed included names, addresses, and driver's license/State ID numbers. Notification to individuals began March 28, 2025, offering credit monitoring.
- Maine State AGas reporting2026-04-07
JM Forbes & Co. reported a business email compromise incident on November 17, 2025, where an external party gained access to an employee email account via social engineering. The breach affected 584 individuals, including 23 Maine residents, exposing names, addresses, SSNs, and account numbers. JM Forbes contained the incident, engaged forensic experts, and provided 24 months of credit monitoring to affected individuals. Notification was sent on April 7, 2026.
- Maine State AGas reporting2026-03-27
TriMed, Inc. reported an external system breach (hacking) affecting 2 Maine residents. Unauthorized access occurred between Sept 13-21, 2025; discovered Jan 23, 2026. Notices sent March 27, 2026. Data involved: names. Remediation: forensic investigation, security controls, global SOC. Credit monitoring offered.
- New Hampshire State AGas reporting2025-10-09
Unity Technologies notified the NH AG of a security incident affecting 3 NH residents. Unauthorized code was inserted into the SpeedTree checkout page between March 13 and August 26, 2025, capturing names, addresses, emails, and credit card numbers. Unity detected the incident on August 26, 2025, took the site offline, and engaged external cybersecurity specialists. Remediation includes enhanced monitoring and credit monitoring services for affected individuals.
- New Hampshire State AGas reporting2025-10-02
City of Pittsburg, California notified NH AG of a security incident discovered August 18, 2024. Impacted 3 NH residents. Data involved: names, DOB, SSN, medical/health insurance info, financial accounts, passports, driver's licenses. Response: investigation, community notification, call center, credit monitoring, federal law enforcement notification.
- Nebraska State AGas victim2025-07-21
Troutman Pepper Locke LLP notified Nebraska AG of a physical security incident in April 2025 involving a single laptop. Unauthorized access was confined to physical theft of a device containing client personal information (name and variable data). The firm engaged third-party forensic specialists, notified the FBI, and provided 24 months of complimentary credit monitoring via Epiq. Systems were not remotely compromised.
- New Hampshire State AGas victim2025-07-21
Troutman Pepper Locke LLP reported a physical intrusion involving a single laptop in April 2025, affecting one New Hampshire resident. Personal information including name, DOB, SSN, and driver's license was compromised. The firm engaged third-party cybersecurity specialists, notified the FBI, and is offering 24 months of credit monitoring.
- Indiana State AGas victim2025-07-21
Troutman Pepper Locke LLP reported a data breach to the Indiana Attorney General. The breach occurred on 2025-04-17 and was reported on 2025-07-21. 4 Indiana residents were affected. 399 individuals affected in total.
- Maine State AGas reporting2025-07-17
Conterra Ultra Broadband Holdings, Inc. d/b/a Conterra Networks reported a ransomware incident where an unauthorized actor gained access to its network between March 2 and March 12, 2025. The breach was discovered on March 8, 2025. The incident affected 1,497 individuals, including 9 Maine residents. The attacker encrypted servers and potentially exfiltrated files containing names and personal identifiers. Conterra engaged law enforcement (FBI) and forensic specialists, and is offering 12 months of credit monitoring and identity protection services to affected individuals.
- New Hampshire State AGas reporting2025-05-27
Bristol Bay Government Services Group, LLC notified the NH Attorney General of a security incident discovered on October 19, 2024, affecting 1 NH resident. Notifications began May 23, 2025. Data involved likely contact details. External specialists engaged.
- New Hampshire State AGas reporting2025-04-11
Laboratory Services Cooperative (LSC) notified the NH AG of a security incident discovered Oct 27, 2024, affecting ~1,721 NH residents. Unauthorized third-party access to LSC's network resulted in file access/removal. Affected data includes patient/worker PII and health info. LSC engaged forensic specialists, notified law enforcement, and offered credit/medical monitoring.
- New Hampshire State AGas reporting2025-03-20
OBI Seafoods, LLC notified the NH Attorney General of a security incident discovered on August 16, 2024, affecting 6 NH residents. The incident involved personal information of current/former workers and vendors, including SSNs and driver's licenses. OBI engaged forensic specialists, notified law enforcement, and offered credit monitoring.
- Maryland State AGas reporting2025-03-19
OBI Seafoods, LLC notified the Maryland AG of a security incident discovered August 16, 2024, affecting 17 Maryland residents. The breach involved personal information of current/former workers and vendors, including names, SSNs, DOBs, medical info, and bank account details. OBI engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring.
- Maine State AGas reporting2025-03-02
Power Test Industries, LLC reported a cybersecurity incident occurring on April 29, 2024, resulting in unauthorized access to files containing personal information. The breach affected 2,083 individuals nationwide, including 3 Maine residents. Data types included names, addresses, financial accounts, and Social Security numbers. Power Test engaged Kroll for forensic investigation and provided 12 months of credit monitoring to affected individuals.
- Maine State AGas reporting2024-01-25
First Century Bank reported a data breach impacting 23 individuals, which occurred at its third-party vendor, CoreCard, on November 22, 2023. The breach, discovered the same day, involved the exposure of names and financial account information. Affected individuals were notified on January 19, 2024, and offered 12 months of credit monitoring services.