The Maine Office of the Attorney General disclosed a data breach at AgeSpan, Inc. on December 2, 2024, stemming from unauthorized access to an employee’s email account between June 25–26, 2024. The incident compromised the personal information of 207 individuals, though the exact type of exposed data (e.g., financial, health, or PII) was not specified in the report. In response, AgeSpan offered affected individuals a complimentary one-year membership to Experian IdentityWorks Credit 3B, a credit monitoring and identity theft protection service, likely as a mitigative measure against potential fraud or misuse of the exposed data. The breach highlights vulnerabilities in email security protocols, particularly concerning employee accounts with access to sensitive information. While the scale of the breach is relatively small, the exposure of personal data—even without confirmed malicious use—posses risks of identity theft, phishing, or reputational harm to both the company and the impacted individuals.