Dinowitz Data Breach Investigation

Recently, Dinowitz reported to the Attorney General of Maine that it had experienced a data breach in which sensitive personal identifiable information in its systems may have been compromised. According to the breach notice, on July 19, 2024, Dinowitz identified suspicious activity in its environment.¹ As a result, Dinowitz launched an investigation to determine the nature of the incident.

Through its investigation, on October 21, 2024, Dinowitz learned that some of its data had potentially been accessed without authorization.¹ As a result, Dinowitz began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. The exact type of personal information potentially exposed has not been made publicly available by Dinowitz. However, according to Maine state reporting guidelines, “personal information” can include the following types of information:

• Name
• Social Security number
• Driver’s license number
• Financial information, such as account number, credit card or debit card number, and access codes or passwords
• Account passwords or personal identification number or other access codes

Recently, Dinowitz began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Maine residents, Dinowitz is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letters that Dinowitz filed with the Attorney General of Maine is below.