Consumer Privacy & Data Breaches

May 18 – On May 15, 2023, rumors started spreading regarding a possible data breach at Academy Mortgage when the firm was added to the list of victims by a notorious ransomware outfit. Hackers claim to have stolen confidential information from Academy Mortgage, but the company has not confirmed these claims. Academy Mortgage must start delivering data breach notification letters to all persons affected by the event

May 18 – Conner Strong & Buckelew notified the Vermont Attorney General of a data breach on May 10, 2023, after finding that a third party had gained access to sensitive consumer information by hacking the email accounts of multiple employees. CBS may have reported the current data breach, but the company has not said what information was compromised. CSB started mailing data breach notification letters to

May 17 – Asian Health Services (AHS) notified the California Attorney General’s office of a data breach on May 5, 2023, after discovering that sensitive patient information had been stolen due to the hacking of an employee email account. According to the company’s report, the event led to the disclosure of consumers’ names, protected health information, medical record numbers, phone numbers, and birth dates. After it was

May 17 – R&B Corporation of Virginia, doing business as Credit Control Corporation (CCC), informed the Maine Attorney General of a data breach on May 15, 2023, after discovering that an unauthorized user had stolen data from the company’s server. According to the company’s official report, the event led to a third party acquiring access to the personal information of some of its consumers, including their names

May 17 – The data breach lawyers at Console & Associates, P.C. are investigating the Brightly Software data breach. The company reported a data breach to the Office of the Maine Attorney General on May 11, 2023, after discovering that a third party had access to sensitive account holder information housed in the SchoolDude user database. According to the official report filed by the firm, the breach

May 17 – After discovering that a third party had acquired access to an employee email account containing private information about certain persons on May 12, 2023, Retirement Clearinghouse notified the Attorney General of Maine of a data breach. A third party gained access to the names, Social Security numbers, and Matrix Trust Company IRA account numbers of clients, according to the company’s official declaration. Retirement

May 16 – Following notification by NCB Management Services, Inc. of a data incident compromising the security of certain TD Bank customers, the bank filed a notice of data breach with the Office of the Maine Attorney General on May 12, 2023. According to the company’s report, the event led to the exposure of customers’ personal information, including names, Social Security numbers, birthdays, addresses, and account

May 16 – After verifying on May 12, 2023 that a security event affecting the company’s IT network resulted in an unauthorized person getting access to private customer data, Renewal by Andersen (Renewal) submitted a notification of data breach with the Office of the Maine Attorney General. According to the company’s report, the breach exposed the names, addresses, credit card numbers, bank account information, and Social Security

May 16 – Whitworth University discovered on April 28, 2023 that a ransomware attack had compromised the security of sensitive student data and promptly notified the Attorney General of Maine of the incident. According to the company’s complaint, the breach exposed full names, student ID numbers, passport numbers, health information, Social Security numbers, and birth dates of students. After discovering a compromise of consumer information, Whitworth

May 14 – After Gaston College announced on March 3, 2023 that it had been the target of a ransomware attack, the college warned students and staff that their personal data may have been compromised. Gaston College is now evaluating all impacted data to identify what kind of information was compromised and whose it was as part of its ongoing investigation into the issue. Gaston College will

May 14 – Fontainebleau Florida Hotel, LLC (Fontainebleau Hotel) informed consumers on May 9, 2023 that a third party had gained unauthorized access to sensitive information kept on the hotel’s computer network. According to the company’s official report, the event led to the disclosure of customers’ names, bank account numbers, and Social Security numbers to a third party. After discovering a compromise of consumer information, the Fontainebleau

May 14 – ARC Document Solutions, Inc. (ARC) reported a notification of data breach to the Montana Attorney General on May 10, 2023, after discovering that sensitive customer information was exposed via a hack of the company’s computer system. Although ARC has yet to make public what kinds of data were compromised in the incident, we may assume that it contained sensitive customer information. Letters informing anyone

May 14 – After discovering that sensitive patient data had been compromised by a hacker, Uintah Basin Healthcare (UBH) announced the breach on its website on May 10, 2023. According to the report filed by the corporation, the event led to the disclosure of consumers’ personal information, including names, Social Security numbers, protected health information, residences, birth dates, and health insurance details. UBH started distributing data

May 13 – An article detailing a recent data breach at Mercer University was published online on May 9, 2023. The breach was the result of a cyberattack, which allowed an unknown entity to get access to personal data belonging to both students and faculty. According to the report filed by the university, the event led to the disclosure of consumers’ first and surname names as well

May 13 – Amtel, LLC d/b/a Connectivity Source notified the Maine Attorney General of a data breach on May 10, 2023, after discovering that an outside third party had breached the company’s IT system and acquired the personal information of present and past workers. According to the company’s official report, the event led to the disclosure of employee names and Social Security numbers to a third party.