In March 2021, the Maine Office of the Attorney General disclosed a data breach affecting Connor Group, which occurred between August 8 and September 11, 2020. The incident involved unauthorized access to an employee’s email account, leading to the potential exposure of Social Security Numbers (SSNs) of 18,424 individuals, including three Maine residents. The breach posed a significant risk of identity theft, prompting the company to offer 12 months of identity theft protection services via Kroll to those impacted. The exposed data, primarily SSNs, falls under highly sensitive personal information, heightening concerns over fraud, financial exploitation, and long-term reputational damage for both the affected individuals and the organization. While the breach was contained to a single email account, the scale of exposed records and the nature of the compromised data underscore the severity of the incident. No evidence of misuse was immediately reported, but the proactive offering of credit monitoring reflects the potential for severe downstream consequences, including financial fraud or identity theft for the victims.