Davies, McFarland & Carroll Data Breach Lawsuit

On May 22, 2025, Davies, McFarland & Carroll (DMC) confirmed a data breach after unauthorized access to their internal network. The breach, which occurred between May 19-22, 2025, affected 54,712 individuals, exposing personal and medical information. DMC has offered free credit monitoring services and fraud assistance to affected individuals. Those impacted can take steps to protect their information, such as signing up for credit monitoring and placing fraud alerts. If you were affected, you may be eligible to join a class action lawsuit against DMC for compensation.

Davies, McFarland & Carroll
Date of Breach: May 19, 2025
CAU logo

Who was affected:

Clients of Davies, McFarland & Carroll

Impacted Data:

Personal Identifiers (e.g., name, contact information)

Medical Information (specific details may vary based on individual cases)

Financial Details (if applicable)

Other Sensitive Information stored on the compromised systems.

On May 22, 2025, Davies, McFarland & Carroll (DMC), a firm assisting hospitals and organizations, announced a data breach after an external system was hacked. The breach affected 54,712 individuals, including a few Maine residents. Personal information may have been exposed between May 19-22, 2025. DMC has taken action, including offering free credit monitoring services.

Davies, McFarland & Carroll’s Data Breach Investigation

On May 22, 2025, DMC detected unauthorized access to its internal network, triggering an immediate investigation. The firm began working closely with cybersecurity professionals to identify the full scope of the breach. By September 25, 2025, the investigation confirmed that certain files containing personal information were compromised between May 19-22, 2025. These files were stored on the impacted systems during the breach.

While the breach was quickly identified, it was only after extensive forensic analysis that DMC confirmed the potential unauthorized access to sensitive personal data. Despite the swift response, the breach exposed sensitive data, causing concern for those affected.

Upon discovering the breach, DMC acted swiftly to notify individuals impacted by the security incident. The firm is also offering resources and assistance to protect those affected from further damage, including free credit monitoring services and fraud prevention tools.

When Did This Breach Occur?

  • Breach Occurred: May 19, 2025

  • Breach Discovered: May 22, 2025

What Information Was Breached?

The potentially impacted information includes:

  • Personal Identifiers (e.g., name, contact information)

  • Medical Information (specific details may vary based on individual cases)

  • Financial Details (if applicable)

  • Other Sensitive Information stored on the compromised systems.

DMC has not provided a complete list of the information exposed but has assured affected individuals that it is working diligently to notify those impacted.

What You Can Do

If you were impacted by this data breach, there are several important steps you can take to protect your personal information:

  1. Sign Up for Free Credit Monitoring Services: DMC is offering a Single Bureau Credit Monitoring service for free for 12 months. This service will provide alerts about changes to your credit file.

  2. Place a Fraud Alert or Security Freeze: Protect your credit by placing a fraud alert or security freeze with the major credit bureaus (Equifax, Experian, and TransUnion).

  3. Review Financial Statements and Credit Reports: Regularly check your bank statements and credit reports for any suspicious or unauthorized activity.

  4. Use Proactive Fraud Assistance: Take advantage of the fraud assistance services provided by Cyberscout, a TransUnion company, to help you respond to any fraudulent activities and protect your identity.

For further assistance, you can reach out to DMC’s dedicated response line, where experts can answer your questions and guide you through the process of securing your information.

File a Data Breach Lawsuit Against Davies, McFarland & Carroll

If you received a notification from DMC regarding this breach or suspect that your personal information was compromised, you may be entitled to compensation. A class action lawsuit could help you hold Davies, McFarland & Carroll accountable for the breach and any resulting harm.

Contact us at Class Action U for a free consultation, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been impacted by this breach, fill out our quick, easy, and secure form to sign up. There’s no cost to reach out to our legal partner, and no obligation to take further action after speaking with one of our experts.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: August 9, 2025
Date of Breach: November 4, 2025
Date of Breach: November 4, 2024

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.