Gordon Rees Scully Mansukhani LLP

Law Firms & Legal Services - California, United States - 2,500 Employees. Gordon & Rees was founded in...

Dell & Dean PLLC, a law firm, reported an external system breach (hacking) occurring between September 28-29, 2022. The breach was discovered on May 30, 2024, following a forensic investigation. Approximately 6,803 individuals were affected, including 3 Maine residents. Personal information, including government identifiers, was potentially accessed. The firm retained forensic investigators, restored systems, and offered 12 months of Equifax credit monitoring to affected individuals.

Timberland Regional Library notified Washington AG of a phishing incident affecting employee email accounts. Unauthorized access occurred from Aug 21, 2020 to Jan 25, 2021. Discovery was Jan 20, 2021. 26,209 Washington residents affected; data included names, DOBs, SSNs, driver's licenses, and limited medical info. Notifications sent May 5, 2021.

Supplemental notification for 5th Avenue Theatre Association regarding a physical break-in and theft of computer backup tapes containing PII (names, DOBs, SSNs). Incident occurred Aug 29, 2020; discovered Aug 30, 2020. 3,468 Washington residents notified. Law enforcement and forensic experts engaged. Kroll identity monitoring offered.

The 5th Avenue Theatre Association suffered a break-in and theft of computer equipment, including backup tapes, on August 30, 2020. The stolen data may have included names, dates of birth, and Social Security numbers of employees and patrons. Five New Hampshire residents were affected. The organization contacted law enforcement, retained legal and security experts, and offered credit monitoring.

BCHH, Inc. notified the NH Attorney General of a data security incident involving one employee's compromised email account. The compromise was identified on October 15, 2019. The mailbox contained SSNs, ITINs, and driver's license numbers. One NH resident was notified on March 27, 2020. BCHH reset passwords, implemented MFA, and provided 24 months of identity monitoring.

Community Psychiatric Clinic (CPC) notified the Washington AG of two security incidents involving unauthorized access to employee Office365 accounts. The first occurred on March 12, 2019; the second on May 8, 2019, involving a fraudulent wire transfer attempt. Access was via Outlook Web. Data potentially exposed included names, DOBs, SSNs, diagnosis/treatment info, and financial data. 6,600 Washington residents notified. CPC engaged forensic investigators, reset passwords, and offered 12 months of credit monitoring.

HC Financial Advisors, Inc. notified the New Hampshire Attorney General of a cybersecurity incident involving unauthorized access to an MS Office 365 mailbox. The breach affected 107 individuals, exposing government-issued IDs (SSNs, passports, driver's licenses). The attacker's identity is unknown, but access was terminated by an IT consultant. Notifications were sent to affected individuals, offering 24 months of credit monitoring.