Windels Marx Lane & Mittendorf, LLP, a legal services firm, experienced an external system breach on September 11, 2025. This hacking incident was discovered on September 10, 2033, and subsequently reported to regulatory bodies, including the Maine Attorney General, on March 30, 2026. Consumers received notifications starting March 30, 2026. The firm offered 12 months of credit monitoring and identity restoration services through TransUnion to affected individuals.
The breach affected approximately 489 individuals in total, with at least one resident in Maine. The types of data compromised include names and other personal identifiers. The full extent of data types involved, such as financial or medical data, has not been publicly confirmed. Law firm breaches often involve client personally identifiable information.
Details about this incident may continue to emerge as investigations proceed, and additional notifications may be delayed.