The Brock Group suffered a data breach on July 21, 2021, caused by unauthorized access to employee email accounts. The incident exposed sensitive personal information, including names and Social Security numbers, affecting 2,451 individuals, among whom 11 were Maine residents notified on January 14, 2022. The compromised data posed a significant risk of identity theft, prompting the company to offer affected individuals identity theft protection services through IDX, which included credit monitoring and a $1 million reimbursement policy for potential losses. The breach stemmed from a targeted attack on employee credentials, highlighting vulnerabilities in email security protocols. While the company took remedial measures, the exposure of Social Security numbers—critical identifiers for financial and personal security—elevated the severity of the incident, particularly given the potential for long-term fraud and misuse of the stolen data.

The Maine Office of the Attorney General reported a data breach involving The Brock Group on August 10, 2021. The breach, which was discovered between May 7 and May 11, 2021, resulted from an external system breach (hacking) and affected a total of 2,305 individuals, including 7 residents. The sensitive information potentially compromised included Social Security Numbers.