Changeflow GovPing Government General Dubroff, Easley & Lovell LLP Security Incident ...
Priority review Notice Added Final

Dubroff, Easley & Lovell LLP Security Incident Notification

Favicon for www.mass.gov Massachusetts - Breach Notification Letters (Mar 2026)
Published March 3rd, 2026
Detected March 28th, 2026
Email

Summary

Dubroff, Easley & Lovell, LLP is notifying affected individuals of a data security incident that occurred between September 2, 2025, and September 22, 2025. The law firm determined on March 3, 2026, that personal data may have been acquired by an unauthorized party. The firm is offering complimentary identity monitoring services.

What changed

Dubroff, Easley & Lovell, LLP has issued a notification letter to individuals affected by a data security incident. The incident involved unauthorized access to certain files on their network between September 2, 2025, and September 22, 2025. A forensic investigation concluded on March 3, 2026, confirming that personal data, including specific types not detailed in the provided text, may have been compromised.

Affected individuals are being offered complimentary identity monitoring services, including credit monitoring and fraud consultation, through Kroll for an unspecified duration. The letter also advises precautionary measures such as placing fraud alerts or security freezes on credit files and regularly reviewing financial statements. While no identity fraud has been reported to date, vigilance is encouraged. The firm has established a dedicated response line for inquiries.

What to do next

  1. Review the notification letter for details on affected data and Kroll services.
  2. Enroll in complimentary identity monitoring services by the specified deadline.
  3. Consider placing fraud alerts or security freezes on credit files.
  4. Remain vigilant in reviewing financial account statements and credit reports for fraudulent activity.

Source document (simplified)

Dear We are writing with important information regarding a recent security incident. The privacy and security of the personal

information we maintain is of the utmost importance to Dubroff, Easley & Lovell, LLP. We wanted to provide you with

information about the incident, explain the steps you should take to protect yourself, and let you know that we continue

to take significant measures to protect your information.

Upon learning of the incident on around September 22, 2025, we immediately launched an investigation in consultation with outside cybersecurity professionals who regularly investigate and analyze these types of situations to help determine, amongst other things, whether any sensitive data had potentially been compromised as a result of the incident. Through

an extensive forensic investigation, we determined that certain files from our network may have been acquired by an

unauthorized party between September 2, 2025, and September 22, 2025. After a comprehensive review, on March 3, 2026, we determined your personal data may have been included. The information potentially impacted includes your To date, we are not aware of any reports of identity fraud resulting from this incident. Out of an abundance of caution

to help protect you from potential misuse of your information, we are offering identity monitoring services for

months through Kroll. Kroll is a global leader in risk mitigation and response, and their

team has extensive experience helping people who have sustained an unintentional exposure of confidential data. Your

identity monitoring services include Credit Monitoring, Fraud Consultation, and Identity Theft Restoration. Kroll’s identity monitoring services is completely free to you and enrolling in this program will not hurt your credit score. For more information on identity theft prevention and Kroll’s identity monitoring services, including instructions on how to activate your complimentary membership, please see the additional information provided in this letter. This letter provides other precautionary measures you can take to protect your personal information, including placing

a fraud alert and/or security freeze on your credit files, and/or obtaining a free credit report. Additionally, you should always remain vigilant in reviewing your financial account statements and credit reports for fraudulent or irregular

activity on a regular basis.

ELN-26494

Dubroff, Easley & Lovell, LLP is committed to maintaining the privacy of personal information in our possession and

has taken many precautions to safeguard it. We continually evaluate and modify our practices and internal controls

to enhance the security and privacy of your personal information. If you have any further questions regarding this incident, please call our dedicated and confidential toll-free response line that we have set up to respond to questions at

available Monday through Friday from 8:00 a.m. to 5:30 p.m. Central Time, excluding major U.S.

holidays. This response line is staffed with professionals familiar with this incident and knowledgeable on what you can

do to help protect against potential misuse of your information. Sincerely,

Dubroff Easley & Lovell, LLP

Enclosure: Other Important Information

– OTHER IMPORTANT INFORMATION –

  1. Enrolling in Complimentary Identity Monitoring.

Visit https://enroll.krollmonitoring.com to activate and take advantage of your identity monitoring services.

You have until activate your identity monitoring services. Membership Number: For more information about Kroll and your Identity Monitoring services, you can visit info.krollmonitoring.com. Additional information describing your services is included with this letter.

  1. Obtain and Monitor Your Credit Report Under federal law, you are entitled to one free credit report every 12 months from each of the three major nationwide

credit reporting companies. You can obtain a free copy of your credit report by calling 1-877-322-8228, visiting

www.annualcreditreport.com, or by completing an Annual Credit Report Request Form and mailing it to

Annual Credit Report Request Service, P.O. Box 105281, Atlanta, GA 30348. You can access the request form at

https://www.annualcreditreport.com/index.action. Alternatively, you can elect to purchase a copy of your credit report by contacting one of the three national credit reporting agencies. The three nationwide credit reporting agencies’ contact information are provided below. Equifax Experian TransUnion P.O. Box 105069 P.O. Box 9554 Fraud Victim Assistance Department

Atlanta, GA 30348-5069 Allen, TX 75013 P.O. Box 2000 https://www.experian.com/fraud/ Chester, PA 19016-2000https://www.equifax.com/personal/ credit-report-services/ center.html https://www.transunion.com/ credit-fraud-alerts/ (888) 397-3742 fraud-alerts (800) 525-6285 (800) 680-7289

Once you receive your credit reports, review them for discrepancies. Identify any accounts you did not open or inquiries from creditors that you did not authorize. Verify all information is correct. If you have questions or notice incorrect

information, contact the credit reporting company.

  1. Placing a Fraud Alert on Your Credit File. We recommend that you place an initial 1-year “fraud alert” on your credit files, at no charge. An initial fraud alert is free and will stay on your credit file for at least twelve months. The alert informs creditors of possible fraudulent activity within your report and requests that the creditor contact you before establishing any accounts in your name. To place

a fraud alert, call any one of the three major credit bureaus at the numbers listed below. As soon as one credit bureau

confirms your fraud alert, they will notify the others. Additional information is available at https://www.equifax.com/

personal/credit-report-services/credit-fraud-alerts/. Equifax Experian TransUnion P.O. Box 105069 P.O. Box 9554 Fraud Victim Assistance Department

Atlanta, GA 30348-5069 Allen, TX 75013 P.O. Box 2000 https://www.experian.com/fraud/ Chester, PA 19016-2000https://www.equifax.com/personal/ credit-report-services/ center.html https://www.transunion.com/ credit-fraud-alerts/ (888) 397-3742 fraud-alerts (800) 525-6285 (800) 680-7289

  1. Placing a Security Freeze on Your Credit File.

Following is general information about how to request a security freeze from the three credit reporting agencies at no

charge. While we believe this information is accurate, you should contact each agency for the most accurate and up-to- date information. A security freeze prohibits a credit reporting agency from releasing any information from a consumer’s credit report without written authorization. However, please be aware that placing a security freeze on your credit report

may delay, interfere with, or prevent the timely approval of any requests you make for new loans, credit, mortgages, employment, housing, or other services. There might be additional information required, and as such, to find out more information, please contact the three nationwide credit reporting agencies (contact information provided below). You

may place a security freeze on your credit report by contacting all three nationwide credit reporting companies at the

numbers below and following the stated directions or by sending a request in writing, by mail, to all three credit reporting

companies:

Equifax Security Freeze Experian Security Freeze TransUnion Security Freeze P.O. Box 105788 P.O. Box 9554 P.O. Box 160

Atlanta, GA 30348-5788 Allen, TX 75013 Woodlyn, PA 19094 http://experian.com/freeze https://www.transunion.com/ https://www.equifax.com/personal/ credit-report-services/credit-freeze/ (888) 397-3742 credit-freeze (888) 298-0045 (888) 909-8872 In order to place the security freeze, you will need to supply your name, address, date of birth, Social Security number

and other personal information. After receiving your freeze request, each credit reporting company will send you a confirmation letter containing a unique PIN (personal identification number) or password. Keep the PIN or password in a safe place. You will need it if you choose to lift the freeze. If your personal information has been used to file a false tax return, to open an account or to attempt to open an account in your name or to commit fraud or other crimes against you, you may file a police report in the city in which you currently

reside. If you do place a security freeze prior to enrolling in any identity monitoring service, you will need to remove the freeze in order to sign up for the identity monitoring service. After you sign up for the identity monitoring service, you may

refreeze your credit file.

  1. Additional Helpful Resources.

Even if you do not find any suspicious activity on your initial credit reports, the Federal Trade Commission (FTC)

recommends that you check your credit reports periodically. Checking your credit report periodically can help you spot

problems and address them quickly. If you find suspicious activity on your credit reports or have reason to believe your information is being misused, call your local law enforcement agency and file a police report. Be sure to obtain a copy of the police report, as many creditors will want the information it contains to absolve you of the fraudulent debts. You may also file a complaint with the FTC

by contacting them on the web at www.ftc.gov/idtheft, by phone at 1-877-IDTHEFT (1-877-438-4338), or by mail at

Federal Trade Commission, Consumer Response Center, 600 Pennsylvania Avenue, NW, Washington, DC 20580. Your

complaint will be added to the FTC’s Identity Theft Data Clearinghouse, where it will be accessible to law enforcement for their investigations. In addition, you may obtain information from the FTC about fraud alerts and security freezes. Massachusetts Residents: Under Massachusetts law, you have the right to obtain a police report in regard to this incident.

If you are the victim of identity theft, you also have the right to file a police report and obtain a copy of it.

Classification

Agency
MA OCABR
Published
March 3rd, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
ELN-26494

Who this affects

Applies to
Legal professionals
Industry sector
5411 Legal Services
Activity scope
Data Breach Notification
Geographic scope
Massachusetts US-MA

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Compliance frameworks
GLBA
Topics
Consumer Protection Cybersecurity

Get Government General alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when Massachusetts - Breach Notification Letters (Mar 2026) publishes new changes.

Optional. Personalizes your daily digest.

Free. Unsubscribe anytime.