Keenan & Associates failure to follow basic cybersecurity protocols enabled cyberattack that compromised identities of 1.5 million people.

Read the Complaint

On January 26, 2024, Keenan & Associates. (“Keenan”) filed a notice of data breach with the Attorney General of Maine after discovering that the company was the victim of a cyberattack that occurred in August 2023.

What Happened?

According to a recently filed lawsuit, the insurance consulting and brokerage firm detected “disruptions” on certain network servers on August 27, 2023. A subsequent investigation revealed that an unauthorized third party had gained access to Keenan’s computer systems at various times between August 21 and August 27, 2023 and exfiltrated certain data from its’ network.

The lawsuit alleges the incident stemmed directly from Keenan’s failure to implement and follow “even the most basic” cybersecurity protocols to protect the private information in its care.

To make matters worse, although the company purports to have discovered the cyberattack in August of last year, it waited until late January 2024 to begin sending a notice letter, to those affected by the data breach.

According to the filing, Keenan’s allegedly negligent actions will have lifelong consequences for affected individuals.

What Information Was Obtained By The Hackers?

According to the breach notification letter, the investigation revealed that data obtained by the hackers include:

• name,
• date of birth
• Social Insurance number,
• passport number,
• drivers license number,
• health insurance information,
• general health information.

What Is Keenan Doing To Protect My Identity?

According to the data breach notification submitted to the Maine AG, Keenan is offering affected individuals 24 months credit monitoring and protection services.

If you received a data breach notification from Keenan & Associates, it is essential you understand what is at risk and what you can do about it. A data breach lawyer can help you learn more about how to protect yourself from becoming a victim of fraud or identity theft, as well as discuss your legal options following the Keenan data breach.

Protect Yourself. Join Keenan Data Breach Class Action.

If you received a Data Breach Notice from Keenan & Associates, you could now be at risk of identity theft and the devastating financial and legal consequences that go along with it.

You may be eligible to participate in a class action lawsuit to recover compensation for loss of privacy, time spent dealing with the breach, out-of-pocket costs, and more. A successful case could also force Keenan & Associates to ensure it takes proper steps to protect the information it was entrusted with.

The lawsuit looks to cover anyone in the United States whose private information was compromised by the breach announced by the company in January 2024.

Please complete the form shown on this page and a data breach attorney will contact you. There is no cost to you.