The Maine Attorney General's office lists a data breach report from Rockville, filed June 5, 2026. Companies in this situation send legally required notification letters to affected individuals — if you found Rockville's letter in your mail, this page explains what it means and what you can do.
The Maine Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
Rockville's filing with the Maine Attorney General lists these compromised data types:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Rockville operates as a specialized financial services and wealth management firm, providing comprehensive investment advisory, asset management, and financial planning services to a diverse clientele. Because of the sophisticated nature of their operations, Rockville routinely handles high-value financial transactions, investment portfolios, and intricate estate planning for individuals and corporate entities alike. To effectively execute these services, the firm collects and maintains a vast repository of highly sensitive personal and financial documentation. This data encompasses not only everyday banking details but also deeply confidential information required to manage wealth portfolios, establish trusts, and conduct mandatory regulatory compliance verifications.
In 2026, Rockville formally reported a significant security incident to the Maine Attorney General's office, alerting consumers to an unauthorized compromise of its digital infrastructure. While investigations into corporate financial breaches often point toward sophisticated cyberattacks such as targeted ransomware deployments, credential harvesting, or vulnerabilities within third-party vendor networks, incidents of this magnitude typically reveal systemic oversights in network monitoring and access controls. For an entity entrusted with significant wealth management infrastructure, any breach of perimeter security allows malicious actors unhindered opportunities to quietly infiltrate internal databases, harvest restricted files, and exfiltrate confidential client records before detection occurs.
The data compromised in the Rockville breach reportedly includes an array of highly sensitive identifiers, creating severe, cascading risks for affected individuals. The exposure of Full Names, Dates of Birth, and Social Security Numbers provides cybercriminals with the foundational elements necessary to execute comprehensive identity theft and open fraudulent lines of credit. Furthermore, the potential exposure of Financial Account Numbers, Routing Numbers, and direct investment portfolios leaves victims uniquely vulnerable to direct financial account takeover, unauthorized wire transfers, and fraudulent asset liquidation. Unlike simple retail breaches, financial data compromises threaten a victim's entire life savings and long-term economic security, requiring constant vigilance and immediate protective intervention.
As a financial institution handling sensitive consumer assets, Rockville was bound by stringent legal obligations under federal and state frameworks, including the Gramm-Leach-Bliley Act (GLBA) and applicable state consumer protection statutes. These regulatory mandates require financial entities to implement robust administrative, technical, and physical safeguards to ensure the security and confidentiality of nonpublic personal information. The occurrence of a data breach of this scale strongly indicates a failure to maintain adequate security controls, leaving digital backdoors open to unauthorized intruders. Such lapses represent a direct breach of the duty of care owed to clients who trusted Rockville with their most sensitive financial assets.
Receiving an official data breach notification letter from Rockville serves as formal legal acknowledgment that your confidential information was compromised due to inadequate corporate security. Under modern legal standards, the receipt of this notice establishes the necessary legal standing to participate in a class action lawsuit, and courts have increasingly recognized that victims need not suffer actual financial loss to seek legal recourse for the anxiety and increased risk of identity theft. Our firm is currently investigating potential legal claims against Rockville on a contingency fee basis, meaning you pay absolutely nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from Rockville
You were a customer, patient, employee, or client of Rockville
Your personal information was stored in Rockville's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Do not discard the Rockville letter. It documents your standing as an affected individual — the foundation of any claim you file.
Rockville typically offers free credit monitoring to affected individuals. The enrollment code is usually in the letter — activate it even if you see no signs of fraud.
Freeze your credit with Equifax, Experian and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted whenever you need to apply for credit.
Time limits can forfeit your claim. Have attorneys review your Rockville case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in Rockville's systems.
Reported to Attorney General
June 5, 2026
Rockville's disclosure was logged with the Maine Attorney General's office.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Breach victims may recover several categories of loss. What applies in the Rockville matter depends on your state, the data involved, and the company's conduct.
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Reimbursement for fraud charges, unauthorized transactions, or expenses you incurred as a direct result of the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Maine's data breach law (Title 10, Chapter 210-B) imposes strict notification requirements on companies. Maine residents have the right to pursue compensation for data exposure.
The companies below also filed breach notices with the Maine Attorney General. Letter recipients for any of them can pursue a review.
Caldwell Sutter Capital, Inc.
Maine · Jun 2026
Central Maine Area Agency on Aging DBA Spectrum Generations DBA Maine Pine Catering
Maine · Jun 2026
Maine Health Behavioral Health
Maine · Jun 2026
Marsicovetere & Levine Law Group, P.C.
Maine · Jun 2026
Landstar System Holdings, Inc.
Maine · Jun 2026
Orrstown Bank
Maine · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris