The Maine Office of the Attorney General disclosed a data breach affecting KeyBank National Association on April 13, 2023, after its discovery on March 10, 2023. The incident involved the inadvertent exposure of Social Security Numbers (SSNs) belonging to two individuals, though the exact cause (e.g., misconfigured database, human error, or third-party mishandling) was not specified. While the breach was limited in scale, the exposure of SSNs—highly sensitive personally identifiable information (PII)—poses a significant risk of identity theft or fraudulent activity. In response, KeyBank offered 24 months of identity theft protection services through Equifax Complete Premier to the affected individuals, mitigating potential long-term harm. The breach did not indicate broader systemic compromise, ransomware involvement, or large-scale data exfiltration, but the nature of the exposed data (SSNs) elevates its severity due to the potential for financial and reputational damage to the impacted parties.