The Maine Office of the Attorney General disclosed a data breach at Verso Financial, operated by Kevin Grunawalt, where an unauthorized party gained access to an employee’s email account between October 2023 and February 2024. The incident, reported on September 24, 2024, impacted two Maine residents, exposing their personal information. While the exact nature of the compromised data was not detailed, the breach prompted Verso Financial to offer 12 months of identity theft protection services through Epiq Global, including Equifax credit monitoring, to mitigate potential risks like fraud or identity theft. The breach highlights vulnerabilities in email security protocols, raising concerns over internal data protection measures and the potential for broader exploitation if similar accounts were compromised. The limited scope of affected individuals suggests targeted access, though the prolonged exposure window increases the likelihood of undetected data misuse during that period.

The Maine Office of the Attorney General reported a data breach involving Verso Financial on May 28, 2021. The breach, discovered on January 28, 2021, resulted from external hacking, potentially affecting 344 individuals, with Social Security Numbers being among the compromised information.