Investigation into the incident conducted by a third party revealed that attackers may have accessed insurance practice files kept in a network location, said the insurer in breach notification letters, which have also been filed with the Office of the Maine Attorney General. While the types of personal information that had been exfiltrated as a result of the incident were not specified, Johnson & Johnson emphasized that there has been no evidence suggesting the misuse of the compromised data while offering complimentary credit monitoring and identity restoration services to individuals affected by the breach.

Source: SC Magazine