RH Clarkson Data Breach Investigation

Recently, RH Clarkson reported to the Attorney General of Maine that the sensitive personal identifiable information and protected health information in its care may have been compromised. According to the breach notice, on November 20, 2024, RH Clarkson experienced a cybersecurity incident that involved unauthorized access to its network.¹ As a result, RH Clarkson launched an investigation to determine the nature of the incident.

Through its investigation, RH Clarkson determined that an unauthorized actor may have accessed and acquired certain files on or around November 20, 2024.¹ As a result, RH Clarkson began a review of the data to determine what information had been impacted, as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Social Security number
• Address
• Date of birth
• Driver’s license or state identification card number
• Financial Information (e.g. account number, credit or debit card number)
• Medical information
• Health insurance information

On June 30, 2025, RH Clarkson began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Maine residents, RH Clarkson is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letters that RH Clarkson filed with the Attorney General of Maine is below.