Molen & Associates Data Breach

What Happened?

On October 24, 2023, Molen & Associates, an accounting firm, experienced a significant network security event. This incident involved unauthorized access to parts of the company's environment, which was discovered upon routine monitoring. The breach period was identified to have started on October 4, 2023, and lasted until October 25, 2023. Molen & Associates acted swiftly by launching an investigation with the assistance of third-party forensic experts to determine the scope and extent of the breach.

The investigation revealed that the unauthorized access potentially compromised sensitive personal information. The types of consumer information exposed included names, addresses, and in some cases, social security numbers, which are particularly sensitive due to their use in identity verification.

In response to the discovery, Molen & Associates took steps to secure their systems and prevent future incidents. These measures included enhancing their network security and continuing to work closely with cybersecurity professionals.

What Information Was Involved?

The data potentially accessed during the breach primarily included personal information such as:

• Names
• Addresses
• Social Security Numbers
• Tax-related information

It is important to note that, as of now, there is no indication that this compromised information has been misused. However, the possibility of identity theft cannot be ignored given the nature of the data involved.

What Are We Doing?

Following the discovery of the breach, Molen & Associates has taken several steps to address the incident and help protect affected individuals:

1. Immediate Investigation: The firm promptly initiated an investigation and engaged a national cybersecurity firm to assess the scope of the incident.
2. Law Enforcement Notification: Authorities were notified to ensure a comprehensive response to the incident.
3. Enhanced Security Measures: The firm is evaluating and implementing additional security measures to fortify their systems against future attacks.
4. Identity Protection Services: Molen & Associates is offering affected individuals complimentary access to Experian IdentityWorksSM for twenty-four months. This service includes identity detection, credit monitoring, and identity restoration support.

To activate your complimentary Experian IdentityWorks membership, please visit Experian IdentityWorks and use the activation code provided in your notification letter. It is crucial to enroll by July 1, 2024, as the activation code will expire after this date.

How Can You Protect Yourself?

If you believe you were affected by this breach, there are several steps you can take to protect your identity:

• Monitor Your Accounts: Keep an eye on your financial accounts for any unauthorized activity. Immediately report any suspicious transactions to your bank.
• Credit Reports: Regularly review your credit reports from the three major credit bureaus. You can obtain a free credit report once a year from each bureau at AnnualCreditReport.com.
• Fraud Alerts: Consider placing a fraud alert on your credit reports, which warns creditors to take extra steps to verify your identity before opening new credit accounts in your name.
• Credit Freeze: A more secure option is to place a credit freeze on your reports, which prevents creditors from accessing your credit report entirely, thus blocking new credit applications.

Additional Resources

For more information about how to respond to this data breach, or if you need assistance with the steps mentioned above, please contact Experian’s customer care team at 833-918-9464. They are available Monday through Friday, from 8 am to 8 pm Central Time.

For further details on the breach and the response from Molen & Associates, you can view the official disclosures on the Maine Attorney General's website and the Texas Attorney General's website.

Remember, protecting your personal information is crucial, and taking proactive steps can significantly mitigate the risk of identity theft.