McGivney, Kluger, Clark & Intoccia, P.C.

McCormick & Priore, P.C. reported unauthorized access to a legacy system between Dec 6-9, 2024, discovered Dec 9, 2024. New Hampshire residents' names and driver's license numbers were potentially impacted. The firm engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring.

Trinity Village, a senior living community, notified the Maryland AG that staff used an unapproved, non-HIPAA-compliant mobile application to share non-critical PHI (lab/radiology results, condition changes) with one another. One Maryland resident was affected. No third-party access or financial data was compromised. Staff were instructed to stop using the app, communications were deleted, and staff were re-educated on HIPAA compliance.

McGivney, Kluger, Clark & Intoccia, P.C. (MKCI) notified the NH Attorney General of a cyber incident affecting 11 NH residents. On Jan 30, 2023, employees received an email from an unidentified sender claiming to have taken MKCI data. Investigation revealed data was copied in Nov 2022. Personal information was impacted. MKCI engaged cybersecurity professionals, reported to law enforcement, and offered 12 months of credit monitoring.

McGivney, Kluger, Clark & Intoccia, P.C. reported an external system breach (hacking) occurring on November 30, 2022, discovered on May 1, 2023. The incident affected 1,590 individuals, including 6 Maine residents. Acquired data included names and Social Security Numbers. The firm notified affected individuals in writing on May 26, 2023, and provided 12 months of identity theft protection services through IDX.