ECKERT SEAMANS CHERIN & MELLOTT, LLC

Eckert Seamans Cherin & Mellott, LLC reported a data security incident affecting 13 New Hampshire residents. On April 17, 2025, suspicious activity was detected on an attorney's computer. An unauthorized actor accessed the computer and copied files containing names and Social Security numbers of Wheeling University alumni. The incident was contained, law enforcement was notified, and forensic investigators were engaged. Affected individuals received notices on June 18, 2025, including one year of credit monitoring.

Eckert Seamans Cherin & Mellott, LLC notified consumers of a cyber incident discovered on April 17, 2025, involving unauthorized access to an attorney's computer and limited firm data, including a 2019 Wheeling Jesuit University alumni list. The firm engaged forensic investigators, notified law enforcement, and contained the incident. No evidence of data release was found. The firm offered one year of Experian identity monitoring services to affected individuals.

Eckert Seamans Cherin & Mellott LLC reported a data breach to the Indiana Attorney General. The breach occurred on 2025-04-17 and was reported on 2025-06-18. 67 Indiana residents were affected. 9,400 individuals affected in total.

Eckert Seamans Cherin & Mellott, LLC, a law firm, reported a data breach to the Maine Attorney General. The breach, which was discovered on May 20, 2025, and occurred on April 17, 2025, was an external system breach (hacking). The breach affected 13 Maine residents. The company provided written notification to affected consumers on June 18, 2025 and offered 12 months of credit monitoring and identity restoration services through Experian.

American Falls School District #381 notified the Idaho Attorney General on April 29, 2025, of a ransomware incident confirmed on March 31, 2025. The District engaged legal counsel and a digital forensics firm to investigate and contain the breach. Federal law enforcement was notified. The scope of personal information acquired is under investigation, but the District plans to notify affected individuals and offer credit monitoring.

Cottonwood School District #242 reported a data security incident to the Idaho Attorney General on March 11, 2025. The breach originated from third-party vendor PowerSchool, which provides Student Information Systems. The incident exposed Idaho residents' names and Social Security numbers. Cottonwood engaged legal counsel and a forensic firm, and PowerSchool provided notice and credit monitoring to affected individuals.

Idaho Attorney General's office received a data security incident notice on February 4, 2025, regarding Wilder School District #133, North Star Charter School, and Filer School District #413. A third-party vendor, PowerSchool, experienced a cybersecurity incident impacting student and staff data, including names and Social Security Numbers. The Schools engaged legal counsel and a forensic firm. PowerSchool is notifying affected individuals and offering credit monitoring.

Sugar-Salem School District No. 322, Liberty Charter School, and Victory Charter School reported a cybersecurity incident involving their third-party vendor, PowerSchool. The incident, discovered on January 7, 2025, exposed Idaho residents' names and Social Security numbers. The Schools engaged legal counsel and a forensic firm, confirming the breach of personal information under Idaho law. Notice was filed with the Idaho Attorney General on January 21, 2025, with plans to notify affected individuals and offer credit monitoring.

Idaho Attorney General received notice on Jan 21, 2025, regarding a cybersecurity incident affecting Liberty Charter School, Sugar-Salem School District #322, and Victory Charter School. The incident involved third-party vendor PowerSchool, exposing Idaho residents' names and Social Security Numbers. The Schools are investigating and will provide credit monitoring.

Wendell School District No. 232 and Kimberly School District #414 reported a cybersecurity incident involving their third-party vendor, PowerSchool. The incident, discovered on January 7, 2025, resulted in the exposure of Idaho residents' names and Social Security numbers. The Districts engaged legal counsel and a forensic firm, and are providing written notice and credit monitoring to affected individuals.

American Falls School District No. 381 notified the Idaho Attorney General of a cybersecurity incident involving its third-party vendor, PowerSchool. The incident compromised the personal information of Idaho residents, specifically names and Social Security numbers, stored in the vendor's Student Information System. The District engaged legal counsel and a digital forensics firm for investigation and plans to notify affected individuals and offer credit monitoring.

Jefferson Joint School District No. 251 reported a data security incident involving its third-party vendor, PowerSchool. The incident compromised the personal information of certain former students, specifically names and Social Security numbers. The district engaged legal counsel and a digital forensics firm for investigation and plans to notify affected individuals and offer credit monitoring.

Post Falls Police Department (Idaho) disclosed a ransomware attack detected on February 19, 2022. Cybercriminals exfiltrated data before deploying ransomware, affecting approximately 973 Idaho residents. Compromised data included names, DOB, addresses, SSNs, driver's license numbers, and bank account/routing numbers. PFPD notified the FBI, engaged forensic experts, and provided 973 residents with credit monitoring via Experian. Remediation included enhanced network monitoring, password policies, and intrusion detection.

Valley Regional Transit (VRT) experienced a ransomware attack in October 2021. Cybercriminals exfiltrated folders containing personal information of Idaho residents, including names, DOBs, SSNs, driver's license numbers, and one payment card number. VRT notified approximately 477 affected residents, offering one year of credit monitoring via Experian. Substitute notice was provided for 38 individuals whose addresses could not be located.