SMC Data Breach Exposes 411,226 Files: Details

Semple Marchal and Cooper, LLP, a regional accounting firm based in Phoenix, Arizona, experienced a data breach. The breach was first discovered on May 10, 2025. INTERLOCK, a well-known ransomware group, took responsibility for the attack and posted details of the stolen data on the dark web on May 19, 2025.

An investigation was launched and it was determined that in Feb. 2025 a data breach involving unauthorized access to the firm’s internal share drive took place. According to the company, the cybersecurity incident stemmed from a phishing campaign that was able to bypass SMC’s detection systems, granting attackers access to sensitive files.

The data breach impacted at least one of the firm's client's. SmartRent Technologies retirement savings plan audit was compromised, which included personal information for current and former employees from 2019 to 2024. Information exposed due to the cyberattack includes full name, surname, full address, Social Security number, sex, hire date, end date, employment status, date of birth and marital status.

The cybersecurity incident was disclosed to the Maine Attorney General's office and affected individuals were notified beginning on Aug. 7, 2025.

Semple Marchal and Cooper, LLP's response

In response to the breach, Semple Marchal and Cooper, LLP is notifying affected individuals and offering free identity theft protection services.

If you receive notification from Semple Marchal and Cooper, LLP or SmartRent Technologies, you may want to:

• Enroll in the free IDX identity theft protection services.
• Monitor your credit reports and financial accounts for any unusual activity.
• Be alert for phishing emails or phone calls that may use your exposed information.
• Consider placing a fraud alert or credit freeze with major credit bureaus.

Additional information about the firm can be found on the Semple Marchal and Cooper, LLP website.