Cove Risk Services Data Breach Exposes Sensitive Information of Nearly 50,000 Individuals In May 2025, Cove Risk Services, LLC—a Massachusetts-based insurance provider specializing in workers’ compensation coverage for over 5,000 businesses in Massachusetts and New Hampshire—discovered a significant data breach. The company detected unauthorized access to its network between May 3 and May 5, 2025, following a network disruption on May 5. After completing its investigation on November 10, 2025, Cove Risk Services confirmed that the breach exposed the personal data of 49,385 individuals, including 182 Maine residents. The compromised information includes names, Social Security numbers, dates of birth, driver’s license numbers, health insurance details, medical records, financial account information, and passport numbers. Affected individuals began receiving breach notifications on December 12, 2025. As part of its response, Cove Risk Services offered 12 months of free credit monitoring and identity protection services through Cyberscout (a TransUnion company), with enrollment available for 90 days following notification. The law firm Shamis & Gentile P.A. is investigating potential legal claims on behalf of those impacted, citing possible compensation for damages related to the exposure of sensitive data.

On June 28, 2021, the Maine Office of the Attorney General reported a data breach involving Cove Risk LLC. The breach occurred between April 8, 2021, and April 9, 2021, involving unauthorized access to an employee's email account. This incident affected a total of 273 individuals, with one Maine resident's Social Security number potentially compromised. Cove Risk LLC has offered identity theft protection services through Experian to mitigate the impact.