Brown University

Brown & Streza LLP notified the California Attorney General of a data security incident. On September 5, 2023, the firm learned of network disruption and discovered an unknown actor had gained unauthorized access. A forensic investigation concluded that certain files containing personal information (name and potentially other data) may have been acquired. The firm engaged a cybersecurity firm, reported to law enforcement, and implemented additional security measures. Affected individuals were offered complimentary identity protection services through Experian IdentityWorks.

Brown & Streza, LLP notified the California Attorney General of a data security incident discovered on January 18, 2023. An unknown external actor gained unauthorized access to the firm's network. The firm engaged independent cybersecurity experts and law enforcement. The investigation concluded that personal information, including names and other unspecified data, may have been acquired. Affected individuals were offered 12 months of complimentary identity protection services through Experian IdentityWorks.

Brown Rudnick LLP reported a data breach involving unauthorized access to two Microsoft 365 email accounts between May 17 and May 26, 2022. The incident involved an employee's compromised credentials. Potentially impacted data included names, Social Security numbers, and medical information. The firm engaged forensic specialists, secured accounts, and offered 12 months of credit monitoring. Notification letters were sent starting August 4, 2022.