Brown, Gruttadaro, & Prato PLLC (BGP), a law firm in Rochester, NY, experienced an external email account compromise. An unknown actor gained access to two employee email accounts on or about January 24, 2024. BGP discovered suspicious activity on February 27, 2024. A review completed October 22, 2024, determined that name and Social Security numbers may have been accessed. One Maine resident was notified on December 4, 2024. BGP offered 12 months of IDX credit monitoring.
Affected (this filing): 1