Mark Thomas Reports Data Breach Affecting Sensitive Client Information
Maryland-based firm Mark Thomas filed a report on March 17, 2025, detailing a cybersecurity incident that compromised a range of sensitive client data. The breach exposed personal and financial records, including Social Security Numbers and Legal Correspondence, posing significant risks to affected individuals whose information is now vulnerable.
- State
- Maryland
- Reported
- March 17, 2025
What may have been exposed
- Full Name
- Social Security Number
- Date of Birth
- Home Address
- Financial Account Details
- Tax Return Information
- Legal Correspondence and Case Files
- Direct Deposit Information
On March 17, 2025, Mark Thomas, a professional services firm operating in Maryland, publicly reported a data breach to state regulators. The nature of the cybersecurity incident remains unspecified, and the investigation into its full scope is currently in a monitoring phase. This disclosure indicates an unauthorized access event within the firm's digital infrastructure.
The compromised data types reported include Full Name, Social Security Number, Date of Birth, Home Address, Financial Account Details, Tax Return Information, Legal Correspondence and Case Files, and Direct Deposit Information. This extensive combination of sensitive personal and financial identifiers, alongside privileged communications, presents a substantial risk to individuals whose data was involved.
Exposure of such detailed information can lead to severe consequences for affected parties. Cybercriminals possessing this data could attempt various forms of fraud, including identity theft, unauthorized access to financial accounts, or the filing of fraudulent tax returns. The sensitive nature of Legal Correspondence and Case Files also introduces unique privacy and security concerns.
Individuals who receive a breach notification from Mark Thomas should take immediate action to protect themselves. It is recommended to place a fraud alert or freeze on your credit reports with all three major credit bureaus (Equifax, Experian, and TransUnion). Additionally, carefully review all financial statements and credit reports for any suspicious activity. Be vigilant against phishing attempts or other social engineering tactics that may exploit the exposed information.
What to do if you were affected
Based on the categories of information reported in this filing, these steps can help limit the risk of identity theft and fraud.
Freeze your credit
Place a free credit freeze with Equifax, Experian, and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted anytime.
Guard against tax fraud
File your tax return as early as possible and consider requesting an IRS Identity Protection PIN so no one can file a fraudulent return in your name.
Watch your financial accounts
Review bank and card statements for unfamiliar activity and turn on transaction alerts. Report anything you don't recognize to your bank right away.
Stay alert to targeted scams
Be cautious of calls, texts, or emails that reference this breach. Legitimate organizations won't ask you to confirm sensitive details through an unsolicited message.
Keep your notification letter
Save the notice you received. It documents that your information was involved and is often needed to enroll in any credit monitoring offered or to join a related legal claim.
Source: Maryland Attorney General filing
Related data breach cases
- St. Joseph College of Maine
- St. Joseph College of MaineMD
- St. Joseph College of Maine
- Tokyo Electron U.S. Holdings, Inc.MD
- VUC, Inc.
- Open Door Capital, LLC
- Clarke Nicolini & Associates, Ltd.
- Crown Health Care Laundry Services
- Crown Health Care Laundry ServicesMD
- Clarke Nicolini & Associates, Ltd.MD
- OrthoMinds, LLC
- CSG Consultants
- Open Door Capital, LLCMD
- VUC, Inc.MD