The Republican Governors Association

The Republican Governors Association (RGA) notified the New Hampshire Attorney General of a data breach involving 4 state residents. Threat actors exploited a vulnerability in Microsoft Exchange Server to access RGA's email environment between February and March 2021. While forensic investigators could not confirm what specific data was accessed, the breach notification letter indicates that some residents' names, Social Security numbers, or payment card information may have been accessible. RGA implemented Microsoft patches, offered two years of credit monitoring, and notified the FBI and state regulators.