Charles P. Elliott, P.C., a law firm, experienced a cybersecurity incident involving unauthorized access to its network between September 29 and September 30, 2025. The firm discovered the breach on October 10, 2025. After a forensic investigation, the firm formally determined on May 14, 2026, that certain personal information may have been impacted. The breach was reported to the Attorney General of Maine on May 28, 2026.
The breach exposed names, Social Security numbers, and other sensitive information. The firm has confirmed that Social Security numbers were explicitly part of the exposed data. The specific number of affected individuals has not yet been publicly disclosed. The firm is offering complimentary identity and credit monitoring through Kroll to affected individuals.
Details can emerge as further investigations continue, and notifications to affected individuals may be delayed.