Consumer Privacy & Data Breaches

May 16 – Following notification by NCB Management Services, Inc. of a data incident compromising the security of certain TD Bank customers, the bank filed a notice of data breach with the Office of the Maine Attorney General on May 12, 2023. According to the company’s report, the event led to the exposure of customers’ personal information, including names, Social Security numbers, birthdays, addresses, and account

May 16 – After verifying on May 12, 2023 that a security event affecting the company’s IT network resulted in an unauthorized person getting access to private customer data, Renewal by Andersen (Renewal) submitted a notification of data breach with the Office of the Maine Attorney General. According to the company’s report, the breach exposed the names, addresses, credit card numbers, bank account information, and Social Security

May 16 – Whitworth University discovered on April 28, 2023 that a ransomware attack had compromised the security of sensitive student data and promptly notified the Attorney General of Maine of the incident. According to the company’s complaint, the breach exposed full names, student ID numbers, passport numbers, health information, Social Security numbers, and birth dates of students. After discovering a compromise of consumer information, Whitworth

May 14 – After Gaston College announced on March 3, 2023 that it had been the target of a ransomware attack, the college warned students and staff that their personal data may have been compromised. Gaston College is now evaluating all impacted data to identify what kind of information was compromised and whose it was as part of its ongoing investigation into the issue. Gaston College will

May 14 – Fontainebleau Florida Hotel, LLC (Fontainebleau Hotel) informed consumers on May 9, 2023 that a third party had gained unauthorized access to sensitive information kept on the hotel’s computer network. According to the company’s official report, the event led to the disclosure of customers’ names, bank account numbers, and Social Security numbers to a third party. After discovering a compromise of consumer information, the Fontainebleau

May 14 – ARC Document Solutions, Inc. (ARC) reported a notification of data breach to the Montana Attorney General on May 10, 2023, after discovering that sensitive customer information was exposed via a hack of the company’s computer system. Although ARC has yet to make public what kinds of data were compromised in the incident, we may assume that it contained sensitive customer information. Letters informing anyone

May 14 – After discovering that sensitive patient data had been compromised by a hacker, Uintah Basin Healthcare (UBH) announced the breach on its website on May 10, 2023. According to the report filed by the corporation, the event led to the disclosure of consumers’ personal information, including names, Social Security numbers, protected health information, residences, birth dates, and health insurance details. UBH started distributing data

May 13 – An article detailing a recent data breach at Mercer University was published online on May 9, 2023. The breach was the result of a cyberattack, which allowed an unknown entity to get access to personal data belonging to both students and faculty. According to the report filed by the university, the event led to the disclosure of consumers’ first and surname names as well

May 13 – Amtel, LLC d/b/a Connectivity Source notified the Maine Attorney General of a data breach on May 10, 2023, after discovering that an outside third party had breached the company’s IT system and acquired the personal information of present and past workers. According to the company’s official report, the event led to the disclosure of employee names and Social Security numbers to a third party.

May 11 – Bristol Community College (BCC) reported a data breach to the Office of the Maine Attorney General on May 10, 2023, after discovering that sensitive information belonging to staff and students had been compromised in a cyberattack. According to the company’s formal report, the breach exposed consumers’ names, driver’s license information, birth dates, Social Security numbers, bank account details, debit and credit card numbers,

May 11 – Triad Business Bank reported a data breach to the Office of the Maine Attorney General on May 3, 2023, after a cyberattack exposed the personal information of 8,235 customers. According to the company’s formal declaration, the event led to a third party acquiring access to the personal information of some of its customers, including their names and Social Security numbers. Triad Bank started

May 11 – Sysco Corporation started notifying workers on May 3, 2023, about a data breach caused by a recent hack. Preliminary investigations indicate that someone outside of the organization gained access to sensitive employee information, including names, addresses, Social Security numbers, and maybe more. Sysco started notifying anyone affected by the data breach through mail when it became clear that customer information had been compromised.

May 11 – PRGX Global, Inc. (PRGX) learned that a third party had gained access to private customer data held on the business’ computer network on May 5, 2023, and as a result, the firm filed a report of data breach with the Attorney General of Maine. According to the business’s report, the event led to unlawful access to the identities, bank account information, and Social Security

May 10 – After discovering that sensitive information belonging to more than 25,000 people had been exposed in a security incident earlier this year, ASAS Health, LLC (ASAS) filed a notification of data breach with the Attorney General of Maine on May 8, 2023. According to the company’s report, the breach exposed the names, addresses, Social Security numbers, birthdates, driver’s license information, financial information, and protected

May 10 – Petaluma Health Center (PHC) notified the Attorney General of Maine on April 24, 2023 of a data breach, including the compromise of employee, board member, and volunteer personal information stored on the organization’s computer network. According to the filing by the corporation, the breach led to an unauthorized party having access to the complete names, birth dates, passport numbers, Social Security numbers, residences,