Orenstein Law PLLC

Orenstein Law PLLC notified the Massachusetts Attorney General of an incident where an unauthorized individual gained access to employee email accounts. The firm discovered suspicious activity on September 4, 2025, and engaged third-party specialists. The investigation determined that a limited amount of personal information, including names, may have been accessed. The firm secured the accounts, implemented additional technical safeguards, and is offering 24 months of credit monitoring to affected individuals.

Orenstein Law PLLC dba Atlas Orange notified consumers of a data breach involving unauthorized access to client information. The incident involved the use of stolen credentials. The notice specifically identifies 4 affected individuals in Rhode Island and provides contact information for assistance and identity theft resources.

Orenstein Law PLLC dba Atlas Orange reported a data breach to the Indiana Attorney General. The breach occurred on 2025-09-04 and was reported on 2026-01-28. 2 Indiana residents were affected. 1,935 individuals affected in total.

Orenstein Law PLLC d/b/a Atlas Orange reported an external system breach (hacking) occurring on April 21, 2025, discovered on November 19, 2025. The incident affected 1,935 individuals, including 4 Maine residents. Personal identifiers and government IDs were compromised. Electronic notices were sent on January 28, 2026, offering 12 months of credit monitoring via TransUnion.

Orenstein Law PLLC, a law firm, filed a data breach notification with the Nebraska Attorney General. The breach affected a small number of individuals, specifically noting 4 Rhode Island residents. The notification provides standard identity theft resources, including FTC and state AG contacts. The specific nature of the breach (e.g., hacking, loss) is not detailed in the provided text.

Orenstein Law PLLC d/b/a Atlas Orange notified the NH AG of a September 2025 email account compromise affecting 4 NH residents. Unauthorized access occurred to employee email, exposing names, SSNs, and driver's license details. The firm engaged third-party specialists, secured accounts, and sent notices with 12 months of credit monitoring.