ROBINSON & COLE LLP

Church Home of Hartford, d/b/a Seabury, a non-profit healthcare provider, reported a cyberattack involving email account compromise. The incident affected 1,709 individuals, including 3 Maine residents. Compromised data included names, addresses, and Social Security numbers. Seabury engaged third-party cybersecurity specialists, notified law enforcement, and offered 12 months of credit monitoring.

Church Home of Hartford, d/b/a Seabury, notified the New Hampshire Attorney General of a Business Email Compromise (BEC) incident affecting 4 NH residents. An employee's credentials were stolen via a malicious link in an email from a compromised business partner. Affected data included names, addresses, and Social Security numbers. Seabury engaged cybersecurity specialists, notified law enforcement, and offered 12 months of credit monitoring.

Erickson Companies, LLC reported an external system breach (hacking) occurring on November 16, 2024, detected on November 18, 2024. The incident affected 11,820 individuals nationwide, including 3 Maine residents. Personal information including name, address, and other identifiers was compromised. Erickson engaged third-party cybersecurity specialists, notified law enforcement, and offered 12 months of credit monitoring services to affected individuals.

Cameron & Mittleman LLP reported an external system breach (hacking) occurring on 12/13/2024, discovered on 01/29/2025. 398 individuals were affected, including 1 Maine resident. Affected data included names and addresses. The firm engaged third-party cybersecurity specialists, notified law enforcement, and offered 24 months of credit monitoring via Cyberscout.

Greylock McKinnon Associates, Inc. reported an external system breach (hacking) on May 30, 2023, affecting 13,549 individuals, including 3 Maine residents. Personal information (name, address) was potentially compromised. The company engaged third-party cybersecurity specialists, notified law enforcement, and offered 12-24 months of Experian IdentityWorks services. Notification letters were sent on October 29, 2024.

TDX Construction Corporation reported an external system breach (hacking) occurring on May 5, 2024, discovered on September 18, 2024. The incident affected 3,983 individuals, including 2 Maine residents. Personal information (name, address) was potentially compromised. The company engaged third-party cybersecurity specialists, notified law enforcement, and offered 24 months of Experian IdentityWorks to affected individuals.

Secure Energy Solutions LLC reported an external system breach (hacking) on April 21, 2024, discovered on July 16, 2024. The incident affected 354 individuals, including 1 Maine resident. Personal information (name, address) was potentially compromised. The company engaged third-party cybersecurity specialists, notified law enforcement, and offered 24 months of credit monitoring via Experian IdentityWorks.

Greylock McKinnon Associates, Inc. (GMA) notified individuals of a security incident occurring on May 30, 2023, where an external system breach (hacking) may have exposed names, addresses, and Social Security numbers. GMA engaged third-party cybersecurity specialists and notified law enforcement. Notices were sent on June 28, 2024, offering 12 months of Experian IdentityWorks. 4,950 individuals were affected, including 6 Maine residents.

Greylock McKinnon & Associates, a litigation support consulting firm, notified 1,323 Washington residents of a cyberattack detected on May 30, 2023. The incident compromised personal, Medicare, and health insurance information. GMA engaged forensic specialists, notified law enforcement and the DOJ, and offered 24 months of credit monitoring.

Robinson & Cole LLP reported a data breach occurring between November 15, 2023, and December 8, 2023, discovered on February 13, 2024. The incident involved email compromise affecting 497 individuals, including 2 Maine residents. Compromised data included names and financial account or credit/debit card numbers. Written notification was sent on March 4, 2024.

Robinson & Cole LLP reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-03-04. 73 Massachusetts residents were affected.

Robinson & Cole LLP notified consumers of unauthorized access to two employees' email accounts starting November 15, 2023. The firm secured the accounts and investigated, determining on February 13, 2024, that some consumers' information was included in the emails. Affected data includes names, addresses, and potentially financial account information. The incident is resolved.

Robinson & Cole LLP notified the NH Attorney General of unauthorized access to two employees' email accounts between November 15, 2023, and December 8, 2023. The firm determined that emails containing personal information of two New Hampshire residents were accessed. The incident has been resolved, and affected individuals are being offered credit monitoring.

Fred Jones Enterprises LLC, an Oklahoma-based commercial entity, reported an external system breach (hacking) on September 17, 2021. The incident affected 390 individuals, including 1 Maine resident. The attacker acquired Social Security Numbers. The entity, represented by Robinson & Cole LLP, notified affected individuals on November 22, 2021, and provided 24 months of identity theft protection services via Experian.

Backcountry Edge, Inc. reported a cyberattack on its e-commerce website confirmed on June 3, 2019. The incident potentially exposed customer billing/shipping addresses, credit/debit card info, security codes, and usernames/passwords. 115 New Hampshire residents were notified and offered 12 months of credit monitoring.

Monticello Central School District reported a phishing attack discovered on November 1, 2017, which may have resulted in unauthorized access to the personal information of two New Hampshire residents. The compromised data included names, addresses, dates of birth, and Social Security numbers. The district engaged forensic specialists and offered 12 months of credit monitoring to affected individuals.

Shamrock Financial Corporation notified 6 New Hampshire residents of a data breach resulting from a social engineering intrusion. Access occurred prior to Aug 2, 2017, ending Aug 11, 2017. Potential access to customer loan applications including SSNs and financial data. No evidence of actual exfiltration found. Credit monitoring offered.

Dracut Public Schools notified 90 New Hampshire residents of a breach involving employee W-2 data (name, address, SSN, income) after an employee fell victim to a phishing email on January 12, 2017. The attacker posed as the superintendent. The district froze the compromised email account and contacted law enforcement. Credit monitoring was offered.