In late 2025, ScrogginsGrear, Inc., an accounting and tax preparation firm, experienced a data breach. The incident involved unauthorized access to a single employee email account, which the company discovered on September 10, 2025. This breach was later reported to regulatory bodies, including the Maine Attorney General, on April 15, 2026.
The breach exposed personal data belonging to 8,919 individuals in total, including 4 Maine residents and 240 Indiana residents. The types of data compromised include full names, Social Security numbers, driver's license or state ID numbers, financial account information, dates of birth, health insurance policy numbers, patient account numbers, and medical information. Consumers were notified starting April 7, 2026. ScrogginsGrear offered 12 months of credit monitoring and identity theft protection through TransUnion.
While some information has been confirmed, additional details regarding the full scope of the breach and any ongoing investigations may emerge. Notices to affected individuals may also continue to be sent.