The American Bar Association (ABA) has announced that a data breach last month may have compromised the login information of over a million members.
On March 17, 2023, the ABA observed “unusual activity” on its network. As a result, an “incident response plan” was immediately activated, and cybersecurity experts assisted with the investigation, according to an ABA notice. The probe “determined that an unauthorized third party gained access to the ABA network beginning on or about March 6, 2023, and may have acquired certain information,” it said.
“The personal information involved the username and hashed and salted password you may have used to log into the old ABA website before 2018 or the ABA Career Center since 2018. To be clear, the passwords were not exposed in plain text,” the email said….