On April 16, 2024, the Maine Office of the Attorney General disclosed a data breach affecting HBL CPAs, P.C., an accounting firm. The incident, traced back to November 30, 2023, resulted from an external hacking attack, compromising the personal information of 1,206 individuals, including 2 Maine residents. While the exact nature of the exposed data was not detailed, the breach prompted the company to offer identity theft protection services to affected parties. The breach highlights vulnerabilities in the firm’s cybersecurity defenses, potentially exposing sensitive client data—such as tax records, financial details, or personally identifiable information (PII)—to unauthorized actors. Though no immediate financial fraud or large-scale exploitation was reported, the exposure of such data poses risks of identity theft, phishing scams, or fraudulent activity targeting the victims. The incident underscores the growing threat of cyberattacks on professional service firms, which often handle high-value financial and personal data, making them prime targets for hackers seeking monetizable information.