McElroy, Deutsch, Mulvaney & Carpenter LLP, a law firm, experienced an external system breach (hacking) that occurred between March 28, 2025, and April 1, 2025. The company discovered this breach on December 4, 2025, and subsequently reported it, with consumer notifications occurring on March 12, 2026. This information comes from a Maine Attorney General notice.
The breach involved the exposure of names or other personal identifiers. The exact number of individuals affected nationally has not been disclosed, but at least 5 Maine residents were impacted. The full scope of affected data types, beyond names and other personal identifiers, has not been publicly confirmed. Identity theft protection services, specifically 12 months of credit monitoring through Epiq, were offered to affected individuals.
More details may emerge as investigations continue and as additional state disclosures are made. Official notices to consumers may also be delayed.