COZEN O'CONNOR

DraftKings Inc. reported a credential stuffing attack on November 18, 2022, affecting 67,995 individuals, including 125 Maine residents. The breach involved the acquisition of personal identifiers combined with government-issued IDs. DraftKings, represented by outside counsel Cozen O'Connor, sent written notifications on December 16, 2022. No identity theft protection services were offered.

AllOne Health, a healthcare organization, reported a data breach resulting from unauthorized access to an employee's email account. The breach occurred between September 1, 2021, and February 11, 2022, and was discovered on March 23, 2022. The incident affected 13,669 individuals, compromising their names and Social Security numbers. AllOne Health offered affected individuals one year of complimentary identity protection and credit monitoring services through Epiq.

American Councils for International Education disclosed that program finalists were inadvertently granted administrator-level view access to a database containing applicant records between April 21-28, 2021. The exposure affected 550 individuals, including 119 in Washington. Data accessed included education records, medical records, government IDs, and bank account numbers. American Councils terminated access, conducted an investigation, revised user profiles, and offered credit monitoring.

Cozen O'Connor reported a data breach to the Indiana Attorney General. The breach occurred on 2020-03-30 and was reported on 2020-05-06. 3 Indiana residents were affected. 25 individuals affected in total.