Data Breach Notifications

Entity Information

  • Type of Organization: Non-Profit
  • Entity Name: Massachusetts Continuing Legal Education, Inc. (MCLE)
  • Street Address: 10 Winter Place
  • City: Boston
  • State, or Country if outside the US: Massachusetts
  • Zip Code: 02108

Submitted By

  • Name: Salvatore Ricciardone
  • Title: Director of Philanthropy & Special Projects
  • Firm name (if different than entity):
  • Telephone Number: 617-896-1596
  • Email Address: sricciardone@mcle.org
  • Relationship to entity whose information was compromised: Employee of company

Breach Information

  • Total number of persons affected (including residents): 212
  • Total number of Maine residents affected: 1
  • If the number of Maine residents exceeds 1,000, have the consumer reporting agencies been notified:
  • Date(s) Breach Occured: On 03/20/2021, MCLE discovered that ransomware had been activated on the MCLE network.
  • Date Breach Discovered: MCLE learned of the ransomware activation on 03/20/2021. However, on or around 06/03/2021, the forensic experts MCLE retained discovered that, while the unauthorized party had control of MCLE's systems, they had the ability to access PII; and at that time the forensic experts also identified the nature of the information potentially accessed and the names of the individuals associated with that information. MCLE does not know whether any information was actually accessed and is unaware of any resulting identity theft, fraud or financial losses to consumers.
  • Description of the Breach:
    • External system breach (hacking)
  • Information Acquired - Name or other personal identifier in combination with: Social Security Number

Notification and Protection Services

  • Type of Notification: Written
  • Date(s) of consumer notification: 07/22/2021
  • Copy of notice to affected Maine residents: MCLE Template Breach Notice - All except MA_RI - Final_SR.doc
  • Date of any previous (within 12 months) breach notifications:
  • Were identity theft protection services offered: Yes
  • If yes, please provide the duration, the provider of the service and a brief description of the service: 24-month membership of Experian's IdentityWorks, an identity theft protection and credit-monitoring service