Krol & Associates Reports Data Breach Impacting Sensitive Personal Information Krol & Associates, a professional services firm, disclosed a data breach to the Maine Attorney General after detecting unauthorized access to its IT systems on November 22, 2025. The company launched an investigation, confirming that an unauthorized third party may have accessed sensitive personal identifiable information (PII) stored in its systems. The exposed data varies by individual but includes names, Social Security numbers, addresses, email addresses, dates of birth, phone numbers, and banking information. Following the review, Krol & Associates began mailing breach notification letters to affected individuals, detailing the specific types of compromised data and offering complimentary credit monitoring services. The incident highlights the ongoing risks of cyber threats targeting organizations handling sensitive personal and financial information. Further details are available in the breach notification filed with the Maine Attorney General.