On June 7, 2023, CGM, Inc. filed a notice of data breach with the Attorney General of Maine after learning that an unauthorized party was able to access confidential personal information stored on the company’s computer system. Based on the company’s official filing, the incident resulted in an unauthorized party gaining access to consumers’ names and driver’s license numbers. After confirming that consumer data was leaked, CGM began sending out data breach notification letters to all individuals who were impacted by the recent data security incident.

If you received a data breach notification from CGM, Inc., it is essential you understand what is at risk and what you can do about it. As we’ve discussed in previous posts, companies have a legal duty to protect the confidential information in their possession. And, when a company negligently maintains sensitive data, it may be liable to victims through a data breach lawsuit. To learn more about how to protect yourself from becoming a victim of fraud or identity theft and what your legal options are in the wake of the CGM data breach, reach out to a data breach lawyer.

What We Know So Far About the CGM Breach

News of the CGM data breach is still fresh; however, what we know at this point comes from the company’s filing with the Attorney General of Maine. According to this source, on December 28, 2022, CGM detected unusual activity within its computer network. In response, CGM secured its network and then began working with third-party data security specialists to investigate the incident.

The CGM investigation confirmed that the unusual activity was related to a cyberattack in which an unauthorized party was able to access certain files on the CGM network. Further investigation revealed that some of the files that were accessible to the unauthorized party contained confidential consumer information.

Upon discovering that sensitive consumer data was made available to an unauthorized party, CGM began to review the affected files to determine what information was compromised and which consumers were impacted. While the breached information varies depending on the individual, it may include your name and driver’s license number.

On June 7, 2023, CGM sent out data breach letters to all individuals whose information was compromised as a result of the recent data security incident.

More Information About CGM, Inc.

CGM, Inc. is a software development and data processing company based in Roswell, Georgia. The company provides a SAAS (“software as a service”) solution to help wireless and broadband companies participate in the federal Affordable Connectivity Program (ACP) and Lifeline Program. Through its programming, CGM provides tools necessary to determine subscriber eligibility, enroll low-income households, track agent and distribution activity, calculate and file federal and state reimbursements, and provide audit support to CGM clients. CGM employs more than 25 people and generates approximately $6 million in annual revenue.