THORNBURG INVESTMENT MANAGEMENT, INC.

Thornburg Investment Management, Inc. reported an external system breach (hacking) that occurred between March 29, 2021, and April 30, 2021. The breach was discovered on April 13, 2021. The compromised information includes names or other personal identifiers in combination with financial account numbers or credit/debit card numbers, along with their security codes, access codes, passwords, or PINs. A total of 3,996 individuals were affected, including 10 residents of Maine. The company offered 12 months of identity and credit monitoring services through Equifax to those affected.

Thornburg Investment Management, Inc. notified the NH AG of unauthorized access to employee email accounts between March 29 and April 30, 2021, discovered April 13, 2021. Data potentially exposed included names, SSNs, and financial account info for 14 NH residents. Notice sent Jan 7, 2022. Response included forensic review, law enforcement notification, and 12 months of Equifax credit monitoring.

Thornburg Investment Management, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-03-29 and was reported on 2022-01-07. 33 Indiana residents were affected. 3,280 individuals affected in total.

Thornburg Investment Management reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-01-07. 136 Massachusetts residents were affected. The report records the breach type as electronic.

Thornburg Investment Management, Inc. notified affected individuals of unauthorized access to employee email accounts between March 29 and April 30, 2021, following suspicious activity detected on April 13, 2021. The incident involved phishing leading to credential compromise and email collection. Impacted data included names and potentially SSNs and financial account numbers. Remediation included enhanced email security measures and Equifax credit monitoring services.

Thornburg Investment Management reported an external system breach that occurred between March and April 2021. The breach was discovered in April 2021 and affected 7 Maine residents. The compromised information included names and financial account numbers. The company offered 12 months of identity and credit monitoring services to the affected individuals.