What Is This About?

If you recently received a letter or an email from Drummond Company informing you that your sensitive personal and protected health information was compromised in a data breach, we would like to speak with you about your rights and potential legal remedies. Drummond Company recently disclosed that it was the victim of a data breach that exposed individuals’ sensitive personal and protected health information.

What Happened?

On February 23, 2026, Drummond Company discovered a security incident involving unauthorized access to an employee’s email account. The company reported that an unauthorized third party gained access to the employee email account; the specific method of compromise and the exact dates of unauthorized access were not disclosed. Drummond stated it investigated the incident and determined that files stored within the compromised email account may have been subject to unauthorized access. Drummond then conducted an in-depth review of the account contents to determine what personal information it contained and identify potentially affected individuals. The company’s notification to affected individuals was dated March 31, 2026. Drummond reported the incident to government regulators, including the Maine Attorney General and the Massachusetts Office of Consumer Affairs and Business Regulation. Drummond reported that 1,398 people were affected nationwide.

What Information Was Impacted?

Upon information and belief, the following types of sensitive personal information may have been compromised:

• "Names";
• "Social Security numbers";
• "Dates of birth";
• "Financial account numbers (without PINs or access codes)";
• "Medical information";
• "Addresses";
• "Government IDs" .

What Action Can You Take?

Levi & Korsinsky, LLP is investigating whether affected users are entitled to compensation. If you received a notice from Drummond Company, there is no cost or obligation to participate. Follow the link below to find out about your rights and potential legal remedies available.