The Maine Office of the Attorney General disclosed a data breach at Coordinated Care Services, Inc. in June 2022, stemming from unauthorized access to an employee’s email account between March 10 and March 21, 2022. The incident exposed personal information of 212 individuals, including names and dates of birth, though Social Security numbers were not compromised. Only 2 Maine residents were specifically affected. The breach resulted from a targeted intrusion into the employee’s email, likely via phishing or credential theft, leading to the exposure of sensitive but non-financial personal data. While the scope was limited to basic identifiers, the incident highlights vulnerabilities in email security and the risks of third-party access to employee accounts. No evidence of further misuse (e.g., identity theft or financial fraud) was reported, but the exposure of personal details could still pose reputational and privacy risks for the affected individuals and the organization.