Elmore Goldsmith Kelley & deHoll P.A. (“EGKD”) disclosed a data breach involving unauthorized access to its network. The December 2025 hacking incident resulted in sensitive personal information, including Social Security and driver’s license numbers, being copied from its servers.
Elmore Goldsmith Kelley & deHoll P.A.’s Data Breach Investigation
Elmore Goldsmith Kelley & deHoll P.A. (EGKD), a law firm, announced that it completed an investigation into a cybersecurity incident involving unauthorized access to its internal network. According to the firm, the breach was the result of an external system hacking event that allowed an unauthorized actor to access its network between December 19, 2025, and December 26, 2025.
Upon first learning of the suspicious activity, EGKD stated that it immediately took steps to secure its network environment. The firm also notified law enforcement and engaged third-party forensic firms experienced in handling cybersecurity incidents. These specialists were tasked with determining how the intrusion occurred, what systems were accessed, and whether sensitive information had been copied or exfiltrated.
Through its forensic investigation, EGKD learned that the unauthorized actor not only accessed its network but also copied certain files from its servers during the intrusion window. This detail is significant because data copying or exfiltration increases the risk that compromised information could be used for identity theft or financial fraud.
Following the containment of the intrusion, EGKD conducted a detailed review of the files that were accessed or copied. On January 23, 2026, the review determined that one or more of the affected files contained the personal information of one Maine resident. The exposed information reportedly included highly sensitive data elements.
Although only one Maine resident was confirmed as impacted, the type of information involved in this breach is particularly concerning. Law firms often store financial, legal, and personally identifiable information as part of their representation of clients. When such data is accessed without authorization, the consequences can extend beyond simple identity theft and may include financial fraud or misuse of sensitive legal records.
EGKD reported that it mailed a notification letter via U.S. First-Class mail on February 20, 2026, to the affected Maine resident. The firm is offering one year of complimentary credit monitoring, fraud consultation, and identity theft restoration services. Additionally, EGKD established a dedicated toll-free call center to respond to questions from notified individuals.
While EGKD indicated that it moved swiftly to respond and has taken steps to help prevent similar incidents from occurring in the future, data breaches involving Social Security numbers and direct deposit information present serious risks. Even when only one individual is confirmed as affected, the exposure of financial account details can lead to unauthorized withdrawals, tax fraud, or other forms of identity misuse.
Organizations that collect and store sensitive personal data have a responsibility to implement reasonable cybersecurity safeguards. When unauthorized actors gain access to networks and copy confidential files, impacted individuals may face uncertainty, stress, and potential financial harm. At Class Action U, we believe consumers and clients deserve transparency and accountability when entrusted information is exposed.
Understanding what happened and knowing your rights can empower you to take action if you received a notification from EGKD. Even when companies offer credit monitoring, affected individuals may still have legal options worth exploring.
When Did This Breach Occur?
According to EGKD’s disclosure:
-
Date(s) the Breach Occurred: December 19, 2025 – December 26, 2025
-
Date the Breach Was Discovered: January 23, 2026
The unauthorized actor accessed and copied files from EGKD’s network during the December 19–26, 2025 timeframe. The firm completed its review and determined the impact on January 23, 2026.
What Information Was Breached?
The investigation determined that the affected file(s) contained the following personal information of the impacted individual:
This combination of identifiers and financial data significantly increases the risk of identity theft and financial fraud.
What You Can Do
If you received a notification from EGKD regarding this breach, consider taking immediate steps to protect yourself:
-
Enroll in the complimentary credit monitoring and identity theft restoration services offered by EGKD.
-
Place a fraud alert or credit freeze with major credit bureaus to prevent unauthorized accounts from being opened.
-
Monitor bank accounts and direct deposit activity for unusual withdrawals or changes.
-
Review your credit reports regularly for unfamiliar accounts or inquiries.
-
Report suspicious activity promptly to financial institutions and law enforcement.
Because direct deposit information was involved, closely monitoring your financial accounts is especially important. Even a single compromised record can have lasting financial consequences.
You may also want to explore your legal rights. Many individuals are unaware that they may have grounds to pursue compensation following a data breach, particularly when highly sensitive financial information is exposed. Learning about your options can help you determine your next steps.
File a Data Breach Lawsuit Against Elmore Goldsmith Kelley & deHoll P.A.
If you received a notification letter from Elmore Goldsmith Kelley & deHoll P.A. informing you that your personal information was involved in this data breach, you may have the right to pursue legal action.
Data breach lawsuits seek to hold organizations accountable when sensitive information is exposed due to cybersecurity failures. Depending on the circumstances, compensation may include reimbursement for financial losses, time spent addressing fraud, credit monitoring costs, and other damages related to the incident.
You do not have to navigate this situation alone. Exploring your legal options can help you understand whether you are entitled to compensation and how to protect your rights moving forward.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
