Greylock McKinnon AssociatesA Boston consulting firm that provides support services for civil litigation matters was the victim of a data breach affecting 341,650 people.
The company announced in an April 5 document that the breach occurred on May 30, 2023, was discovered on February 7, and consumers were notified on Friday (April 5). Data Breach Notification Filed with the Maine Attorney General's Office.
The data breach notification described the breach as an “external system compromise (hack)” and said the hackers obtained people's names and other personal identifiers in conjunction with their Social Security numbers.
According to a consumer notification letter filed with the data breach notification, the Social Security number was included in the Medicare health insurance claim number.
According to the letter, the information accessed by the hackers was obtained by the U.S. Department of Justice (DOJ) as part of a civil litigation matter and provided to Greylock McKinnon Associates as part of the company's services to the DOJ in assisting with the matter. That's what it means.
“On May 30, 2023, anomalous activity was detected on our internal network and we immediately took steps to mitigate the incident,” the letter states. “We have consulted with third-party cybersecurity experts to assist in responding to the incident and have notified law enforcement and the Department of Justice. We have received confirmation of what personal information was affected and Contact address received on February 7, 2024.”
This news comes on the heels of several other data breaches.
March 30th, AT&T It has been announced that the personal information of millions of customers has been leaked onto the Internet. dark webThat includes 7.6 million current AT&T account holders and 65.4 million former account holders.
The telecom giant said its investigation found that “fields unique to AT&T data” were part of the data set, but there was no evidence of unauthorized access to its systems. It's not clear if these fields are from his AT&T or that vendor.
March 4th, american express notified the customer data breach At a third party service provider used by many sellers.
The anonymous service provider “experienced unauthorized access to its systems” and may have involved the account information of some American Express cardholders.