BCGL Data Breach Lawsuit Investigation
BCGL has notified regulators and affected individuals of a cyber-incident that allowed an unauthorized actor to obtain certain client information. If you received a breach letter dated October 24, 2025 or later, you may be entitled to free identity-protection services and potential legal remedies. Explore your rights below or request a free case evaluation now.
Download Official Breach Notice (PDF)Key Takeaways
- Incident discovery: suspicious network activity identified and contained in 2025.
- Investigation confirmed unauthorized data acquisition affecting a limited subset of files.
- Affected data includes names and additional personal information specified in individual notices.
- Direct notices sent after BCGL obtained sufficient address information on October 24, 2025.
- Complimentary credit monitoring and identity-restoration services offered through Epiq.
- Breach reported to the Maine Attorney General on December 8, 2025.
Timeline of the BCGL Data Breach
Brubaker Connaughton Goss & Lucarelli LLC (BCGL) detected unusual activity within its network earlier this year. The firm immediately secured its systems and engaged leading third-party forensic experts to determine the scope of the intrusion.
The forensic review concluded that an unauthorized actor accessed and exfiltrated a limited set of BCGL data. After analysing the compromised files, the firm confirmed that client information was present and began compiling up-to-date contact details for impacted individuals.
On , BCGL finalized its list of affected people and initiated direct notifications. The incident was formally reported to the ME Attorney General on .
What Information Was Exposed?
According to the notice filed with Maine regulators, exposed data included an individual’s name plus unspecified “types of information” referenced in each recipient’s letter. BCGL has not publicly listed every data element, so review your letter for the exact details pertaining to you.
BCGL’s Response and Free Services
The firm states it:
- Secured the affected network environment and implemented additional safeguards.
- Retained external cybersecurity specialists to investigate the incident.
- Is offering complimentary credit monitoring and identity-restoration services through Epiq. Enrollment instructions and deadlines appear in the mailed notice.
Steps You Can Take Now
- Follow the enrollment instructions in your letter to activate free credit monitoring.
- Review bank, credit-card, and other financial statements regularly for unfamiliar activity.
- Obtain free annual credit reports and consider placing fraud alerts or credit freezes if appropriate.
- Promptly report any suspected identity theft to your financial institutions and law enforcement.
Company Overview
BCGL is a Pennsylvania-based law firm providing business, litigation, and estate services.
- Website: bcgl-law.com
- Headquarters: 480 New Holland Avenue, Suite 6205, Lancaster, PA, United States
- Industry: Law Practice
- Year Founded: 2012
- LinkedIn: Brubaker Connaughton Goss & Lucarelli LLC
- Contact: bcgl-law.com/contact/
Frequently Asked Questions
I received a data breach letter from BCGL — what should I do?
Carefully read the notice, enroll in the complimentary credit-monitoring service by the stated deadline, and monitor your financial accounts and credit reports for unusual activity.
What information did the BCGL breach expose?
The firm reports that names and additional personal data were accessed. The exact fields vary by individual and are listed in each letter.
How many people were affected by the BCGL breach?
BCGL has not publicly disclosed the total number of impacted individuals as of the latest filing.
Did BCGL offer credit monitoring, and for how long?
Yes. BCGL is providing complimentary credit monitoring and identity-restoration services through Epiq. The duration is specified in each recipient’s enrollment instructions.
How do I submit a claim related to the BCGL data breach?
You may consult a data-privacy attorney to review your rights and potential claims. Keep copies of your breach letter and any evidence of fraud for your records.
How can I get the official breach notice (PDF) for BCGL?
You can download the filing directly from the Maine Attorney General’s website using the button near the top of this article.
Attorney Advertising. Prior results do not guarantee a similar outcome.