RansomwareLegalTeam.com

Got a notice from Forum Communications Company? Here’s what to do.

Forum Communications Company told the Maryland Attorney General that people’s information was exposed. If you got a letter, work through the steps below.

Your checklist

  1. 1

    Keep the letter

    Save the notice from Forum Communications Company and its envelope. The date you were told can matter for legal deadlines.

  2. 2

    Freeze your credit

    Your Social Security number is listed in the filing. A free freeze at Equifax, Experian and TransUnion stops new accounts being opened in your name.

  3. 3

    Call your bank

    Account or card information is listed. Ask your bank for a new card number and watch statements for small test charges.

  4. 4

    Get a free claim review

    Our legal team checks whether you can be paid for this breach. No fee unless you recover.

Step 4: free claim review

Tell us you got the Forum Communications Company notice. An attorney, not a call center, reads it and tells you plainly whether you have a claim.

  • Free, no obligation
  • No fee unless you recover
  • Reply within 24 hours

Got a Notification Letter? Find Out If You Qualify

Free review. No cost, no obligation.

Upload your breach letter (optional)

No attorney-client relationship is created by submitting this form. Attorney Advertising.

About the Forum Communications Company breach

Reported to
Maryland Attorney General
Date filed
March 19, 2025
People notified
Not stated
Cause in filing
Not stated

Information listed in the filing: Full Name, Social Security Number, Date of Birth, Mailing Address, Wage and Compensation Information, Direct Deposit Account Details, Email Address, Subscription and Account History.

Forum Communications Company operates as a prominent media, publishing, and communications enterprise, overseeing a vast network of regional newspapers, digital news platforms, commercial printing operations, and broadcasting outlets. Because of the multi-faceted nature of its business operations, the company functions as a significant repository of sensitive data. It maintains comprehensive human resources, payroll, and benefits administration systems for hundreds of journalists, editors, press operators, and administrative staff across multiple states. Furthermore, its commercial and subscriber networks regularly handle extensive customer databases containing billing details, subscription histories, advertising client profiles, and marketing analytics, making the organization an attractive target for malicious cyber actors seeking high-value personal information.

In 2025, Forum Communications Company formally reported a significant data security incident to the Maryland Attorney General, alerting affected individuals and regulatory authorities to an unauthorized compromise of its network infrastructure. While specific technical forensics continue to be analyzed, cyberattacks targeting media and publishing organizations typically involve sophisticated malware deployment, ransomware operations, or unauthorized third-party access to centralized corporate databases. Organizations in this sector often manage sprawling digital architectures that bridge legacy publishing systems with modern cloud-based customer management platforms, creating potential vulnerabilities that cybercriminals exploit to infiltrate internal networks and exfiltrate confidential files.

The data compromised during the Forum Communications Company security incident encompasses a broad spectrum of personally identifiable information (PII) belonging to employees, contractors, and consumers. Based on the operational scope of media enterprises, exposed data sets frequently include full legal names, Social Security numbers, dates of birth, banking and direct deposit details, home addresses, and confidential employment or subscription records. The exposure of this information creates severe, long-term risks for victims. Social Security numbers and dates of birth serve as the primary keys for identity theft, enabling bad actors to open fraudulent credit accounts, secure unauthorized loans, or intercept government benefits. Meanwhile, compromised banking and payroll records expose victims to immediate financial fraud, direct deposit diversion, and targeted phishing scams that can take years to fully resolve.

Under state data protection statutes, the Maryland Personal Information Protection Act (MPIPA), and general common-law negligence principles, Forum Communications Company had a strict legal duty to implement and maintain reasonable security procedures to safeguard sensitive consumer and employee data from unauthorized access. This statutory framework requires businesses that collect and store PII to utilize robust encryption, advanced threat detection systems, secure access controls, and regular vulnerability assessments. The occurrence of a data breach strongly suggests a failure of these foundational security obligations. When a company experiences an intrusion that successfully siphons sensitive personal records, it frequently indicates that the organization failed to maintain adequate technical safeguards or neglected to remediate known system vulnerabilities in a timely manner.

Receiving an official data breach notification letter from Forum Communications Company carries significant legal weight, serving as an admission by the company that your confidential information was compromised due to inadequate security. For affected individuals, this notification establishes the legal standing necessary to participate in a class action lawsuit aimed at holding the company accountable for its security failures. Importantly, under modern consumer protection jurisprudence, victims do not need to prove that they have already suffered actual financial theft or monetary loss to seek compensation; the imminent risk of future identity theft and the time and expense required to monitor one's credit are recognized legal harms. Our firm investigates these cases on a contingency fee basis, meaning affected individuals pay absolutely nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.

See the official filingFull ransomware checklist

Forum Communications Company data breach questions

How many people were affected by the Forum Communications Company data breach, and what was exposed?
The filing does not give a count of affected people and lists the following information as involved: Full Name, Social Security Number, Date of Birth, Mailing Address, Wage and Compensation Information, Direct Deposit Account Details, Email Address, Subscription and Account History. Your own letter is the best guide to what was exposed about you, since notices are usually tailored to each person.
Is the Forum Communications Company data breach letter legit or a scam?
A notice from Forum Communications Company in the mail matches the breach Forum Communications Company reported to the Maryland Attorney General on March 19, 2025. Check that the company name and dates in your letter match that filing. A real notice of data security incident won't ask for your password, Social Security number or a payment — if it does, contact Forum Communications Company through a phone number or website you find yourself.
Did Forum Communications Company offer free credit monitoring?
Check your letter from Forum Communications Company. If free credit or identity monitoring is offered, the enrollment code and deadline are printed in the notice itself. Because Social Security numbers are listed in this filing, identity monitoring and a credit freeze matter more than usual. Signing up doesn't waive any legal rights you may have.
Is there a Forum Communications Company data breach class action lawsuit?
Law firms often open an investigation after a breach notice like this one, and a class action lawsuit may follow. This page doesn't confirm that a lawsuit has been filed against Forum Communications Company. You usually don't have to join a class action to be included — if a settlement is reached, class members are notified and can file a claim.
What should I do after getting the Forum Communications Company data breach notice?
Keep the letter and the envelope, and note the date it arrived. Freeze your credit with Equifax, Experian and TransUnion, change any passwords the notice mentions, and sign up for any free credit monitoring the letter offers. Then check whether you may have a claim.
Where can I see the official Forum Communications Company breach notice?
Forum Communications Company's report is published by the Maryland Attorney General: https://oag.maryland.gov/resources-info/Pages/security-breach-notices.aspx#ITU-376572 Compare it with the letter you received to confirm the dates and details match.
Do I need a Forum Communications Company data breach lawyer or attorney?
An attorney can read your notice and tell you whether a claim makes sense. A case review here is free, and data breach cases are usually handled on contingency, so there is no upfront cost.
Can I sue Forum Communications Company over the data breach?
It depends on what was exposed, the law in Maryland and your own state, and whether you've been harmed. Most people take part through a class action rather than suing alone. Keep your notification letter — it's the proof that connects you to the breach.
How much could a Forum Communications Company data breach settlement or claim be worth?
There is no set amount, and no Forum Communications Company settlement is confirmed here. In past data breach settlements, payments depended on what data was exposed and on documented losses — fraud, out-of-pocket costs and time spent dealing with the breach. The filing lists Full Name, Social Security Number, Date of Birth as involved. Keep receipts and records; they're what damages claims are built on.

Other notices sent in Maryland

Attorney advertising. This page reflects a public regulator filing; it does not mean a lawsuit has been filed or that the company did anything unlawful. Submitting a review request does not create an attorney-client relationship.