Perkins & Co.

Perkins & Co, a tax services firm, notified the NH AG of a data event involving its cloud hosting vendor, Netgain. Between Nov 8 and Dec 3, 2020, an attacker accessed Netgain servers, exfiltrated and encrypted Perkins' client files, and demanded ransom. Netgain paid the ransom and recovered files. 5 NH residents were notified. Data at risk included names, SSNs, and financial info. Response included credit monitoring and vendor remediation.

Affected (this filing): 5

Perkins & Co., an accounting firm based in Oregon, reported a data breach involving a third-party service provider. The incident occurred between November 8, 2020, and December 3, 2020, affecting 2,642 individuals, including 2 Maine residents. The breach compromised names and Social Security Numbers. Perkins & Co. notified affected individuals in writing on March 26, 2021, and provided 24 months of credit monitoring and identity restoration services through IDX.

Affected (this filing): 2,642