On March 30, 2021, McCabe & Associates experienced a data breach due to a credential compromise via phishing, exposing sensitive personal and financial information of five Maine residents. The compromised data included names, financial account numbers, and Social Security numbers—highly sensitive details that could facilitate identity theft or financial fraud. The breach was reported to the Maine Office of the Attorney General on July 2, 2021, nearly three months after the incident. In response, the company offered affected individuals 12 months of credit monitoring and identity restoration services through Equifax to mitigate potential harm. The breach highlights vulnerabilities in credential security and the risks of phishing attacks targeting employee access, leading to unauthorized exposure of personally identifiable information (PII). While the scale of affected individuals was limited (five residents), the nature of the leaked data—particularly Social Security numbers and financial account details—poses significant long-term risks for identity theft, financial fraud, and reputational damage to both the individuals and the company.