Strauss Borrelli PLLC, a leading data breach law firm, is investigating Stevens & Day, LLP, regarding its recent data breach. The Stevens & Day data breach may have involved sensitive personal identifiable information belonging to over 2,000 individuals.
ABOUT STEVENS & DAY, LLP:
Stevens & Day is a law practice operating in Maine. Founded in 2015, Stevens & Day was formed as a solo practice focused on litigation, mediation, and arbitration.2 Today, Stevens & Day has broadened its scope of services to include personal injury, business law, real estate, will & trust disputes, corporate formation, and more.2 Headquartered in Augusta, Maine, Stevens & Day employs approximately 10 individuals.
WHAT HAPPENED?
On August 8, 2025, Stevens & Day reported to the Attorney General of Maine that it had experienced a data breach in which the sensitive personal identifiable information in its care may have been compromised.1 According to the breach notice, on November 29, 2024, Stevens & Day became aware of unusual activity on its network.1 As a result, Stevens & Day launched an investigation to determine the nature of the incident.
Through its investigation, Stevens & Day determined that certain portions of its network may have been accessed by an unauthorized third party between November 22 and November 28, 2024.1 As a result, Stevens & Day began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. On July 1, 2025, Stevens & Day completed its investigation. The exact type of personal information potentially exposed has not been made publicly available by Stevens & Day. However, according to Maine state reporting guidelines, “personal information” can include the following types of information:
- Name
- Social Security number
- Driver’s license or state identification card number
- Account number, credit card number or debit card number, if circumstances exist wherein such a number could be used without additional identifying information, access codes or passwords
- Account passwords or personal identification numbers or other access codes
On August 8, 2025, Stevens & Day began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Maine residents, Stevens & Day is providing affected individuals with a list of the specific types of sensitive information impacted and 12 months of complimentary credit monitoring services. A link to the form breach notification letters that Stevens & Day filed with the Attorney General of Maine is below.
If you received a breach notification letter from Stevens & Day, LLP:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
