A significant data breach at Greylock McKinnon Associates (GMA), a U.S. consulting firm, resulted in the theft of approximately 341,650 Social Security numbers, the company revealed. The breach was made public through a notification on the official Maine government website, which lists such incidents.
Following the discovery of a cyberattack in May 2023, GMA announced that immediate actions were taken to address the security incident. The firm, known for its economic and litigation services to various corporate and government clients, including the U.S. Department of Justice (DOJ), emphasized that the leaked information was part of data collected for DOJ-supported civil litigation cases.
Despite the breach, GMA reassured affected individuals through mailed notifications that they are neither subjects of the ongoing investigation nor related litigation. The firm also stated that the breach should not affect individuals’ Medicare benefits or coverage.
To tackle the breach, GMA enlisted the help of cybersecurity experts and informed both law enforcement and the DOJ about the incident. By February 7, 2024, GMA had identified and reached out to the individuals whose information was compromised, which included not only Social Security numbers but also names, birth dates, home addresses, medical and health insurance details.
The delay in disclosing the full impact of the breach and notifying those affected has raised questions, with GMA and its legal representatives yet to provide further details or comments on the matter.
