On May 30, 2023, Greylock McKinnon Associates, Inc. detected unusual activity on their internal network. This was the beginning of a sophisticated cyberattack which, upon extensive forensic review, was confirmed on February 5, 2024, to have compromised sensitive personal information. The types of information exposed include names, addresses, medical and health insurance information, dates of birth, and Social Security numbers. This breach has affected a significant number of individuals across the United States, with a total of 341,650 people impacted.
The breach was first discovered by the company on February 7, 2024, and the affected consumers were notified on April 5, 2024, through written communication sent via U.S. Mail. The company has taken several steps to address and mitigate the breach, including consulting with third-party cybersecurity specialists and notifying law enforcement.
The personal data exposed in this breach could potentially be used for identity theft and other fraudulent activities. Therefore, it is crucial for affected individuals to take immediate steps to protect their information.
For further assistance and to learn more about protecting yourself from identity theft, you can visit the official pages of the state Attorney Generals where the breach was reported: