Wiggin and Dana LLP (“Wiggin and Dana”) suffered from a ransomware attack that affected their network systems. The compromised information includes name, date of birth, Social Security number, financial account information, medical/diagnosis/treatment information, and/or government-issued identification numbers. They investigated the incident with the help of the assistance of forensic specialists and tried to restore the data.

On April 5, 2021, Wiggin and Dana, a law firm, suffered a security breach that was later confirmed to have compromised sensitive personal data. The incident, identified by July 20, 2021, exposed critical information of five Maine residents, including Social Security numbers, driver’s license details, financial account information, and medical records. The breach posed significant risks, such as identity theft, financial fraud, and unauthorized access to private health data. Affected individuals were formally notified via written correspondence around September 14, 2021, nearly five months after the initial detection. The delayed disclosure and the nature of the exposed data—particularly the combination of financial, governmental (SSN, driver’s licenses), and medical records—highlight the severity of the incident, as such information is highly valuable to cybercriminals for exploitation in fraudulent activities or further targeted attacks.