Marks & Associates, a California-based professional services firm, disclosed a data breach occurring in November 2018 involving a social engineering scam. Unauthorized parties accessed an employee's email account and network portions. Potentially exposed data included names and Social Security Numbers. The firm engaged third-party IT consultants, replaced servers, and provided credit monitoring services to affected individuals.