Article

Catastrophic Breach Of A Law Firm And A County Office

April 3, 2025

Another week and another data breach hit the press with thousands of victims’ medical records accessed by attackers. Bassford Remele, a Minnesota-based law firm, announced that it had experienced a data breach starting last summer. According to the breach notice on its website, between July 29, 2024, and September 4, 2024, an unauthorized party may have accessed and potentially compromised sensitive personal information in its systems. It’s unclear what type of information was accessed.

However, according to the notice, certain information provided by healthcare organizations to which Bassford Remele provides legal services may have been accessed, including Social Security numbers and medical record information. Notices have been sent to the affected individuals. It appears that the breach was detected when Bassford Remele discovered that unauthorized emails had been sent from a third-party application purporting to be from an employee’s email account.

Read the entire article here.