Christopher L. Mewborn, Attorney, P.A. (Mewborn & DeSelms), a legal firm, has confirmed a significant data breach incident that impacted its computer systems, potentially exposing sensitive personal of individuals. The breach has affected a total of 12,941 individuals, including 11 Maine residents.
Although there is no confirmed evidence of misuse at this time, affected individuals are encouraged to stay vigilant. It’s recommended to closely monitor financial accounts, update passwords, and be cautious of potential phishing attempts. For guidance on safeguarding your information after this incident, explore this resource on how to take action after a data breach and minimize potential harm.
Details of the Mewborn & DeSelms Data Breach
The breach, attributed to the ransomware group BlackSuit, occurred on March 22, 2024, but was only discovered on January 31, 2025. BlackSuit is a known cybercriminal organization that has been linked to ransomware attacks targeting businesses and institutions. The extent of the group’s involvement in the breach and whether a ransom was demanded remains unclear.
The firm first identified a network disruption on April 2, 2024, and immediately launched an investigation with cybersecurity specialists. It was later determined that certain files had been accessed or stolen on May 30, 2024. A comprehensive review revealed that names and Social Security numbers were among the potentially compromised data.
In response to the breach, the firm is offering 12 months of credit monitoring and fraud assistance through Cyberscout, a TransUnion company. Impacted individuals are encouraged to enroll in these services within 90 days.
