Greylock McKinnon Associates, a service provider for the U.S. Department of Justice, suffered a data breachthat exposed the personal information of 341,650 individuals.
Greylock McKinnon Associates (GMA) provides services to a variety of clients in the legal sector, the business community, and government agencies, including the Department of Justice (DoJ).
A recent data breach impacted medical and other information. Greylock McKinnon is investigating the data breach with the help of external cybersecurity experts.
See also: Home Depot: Data breach affects employees
The breach occurred on May 30, 2023, but details about the individuals affected were revealed on February 7, 2024.
The company announced that it deleted DOJ data from its systems after the incident.
The data breach notification sent by Greylock McKinnon Associates to the Attorney General states that the company fell victim to a sophisticated cyberattack.
“On May 30, 2023, we detected unusual activity on our internal network and immediately took steps to mitigate the incident. We consulted with third-party cybersecurity experts to assist in our response to the incident and notified enforcement and the Department of Justice. We received confirmation of which individuals were affected and received contact on February 7, 2024.“.
See also: City of Hope: Cancer treatment center announces data breach
The individuals affected by the incident had provided their information to the U.S. as part of a civil lawsuit. However, Greylock McKinnon Associates had also received this information in order to provide its services to the Department of Justice.
The compromised data includes personal and Medicare information , such as name, date of birth, address, Medicare health insurance claim number (which contains a social security number associated with a member), and certain medical and/or health insurance information .
Consequences for individuals affected by the data breach
One of the possible consequences is theft identity. Perpetrators may use personal data to create fake accounts or obtain credit in the victim's name.
Also, perpetrators may use the data to commit tax fraud, by submitting false tax returns in the victim.
See also: Prudential Financial notifies 36,000 people of data breach
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
Victims may also face problems with their personal security, as perpetrators may have access to information such as their address.
Finally, data leakage can lead to a loss of trust on the part of customers and partners, which can have significant impacts on the business.
The company is offering affected individuals free identity theft protection and credit monitoring services for 24 months
Source: securityaffairs.com
