Sax data breach potentially affects 220K

Sax LLP, a Top 100 Firm, concluded its investigation after a data breach in 2024 and determined that the personal data of as many as 220,000 people has been leaked.  

According to a disclosure sent to the Maine Attorney General's office, the firm noticed unusual activity on Aug. 7, 2024. In response, Sax launched its own internal investigation plus one aided by third party cybersecurity experts. In the course of the investigation, the firm found that sensitive data containing personal information may have been exposed. Looking into the matter further, Sax concluded that as many as 220,000 people might have been affected. 

This data might include names, Social Security numbers, birth dates, driver's license or other state ID numbers, and passport numbers. This does not necessarily mean all the information was exposed for everyone but, rather, that it potentially could have been. 

Sax has since updated its safeguards to discourage such an event from happening in the future. It is currently working to contact those who the firm suspects have been affected to inform them of the incident. 

For those whose Social Security numbers were involved with the incident, Sax said it is providing up to 12 months of identity protection services, which includes credit monitoring, dark web monitoring, credit protection, identity restoration and lost wallet assistance. In addition, Sax has established a toll-free call center through Epiq, a provider of legal and business services, to answer questions about the incident and address related concerns. The firm is also providing guidance on how to better protect against identity theft and fraud, such as how to place a fraud alert and security freeze on their credit file.

The horse might already be out of the barn, though, as previous data shows hackers can monetize stolen information within hours, or even minutes, of acquiring it.