CANTELLA & CO.,INC.

Cantella & Co., Inc. reported a cybersecurity incident to the New Hampshire Department of Justice on November 16, 2020, regarding an Emotet malware infection detected on August 25, 2020. The incident involved phishing emails with malicious .doc attachments that infected 23 computers (10 home office, 13 advisors). The malware exfiltrated email strings and potentially client PII (names, addresses, SSNs) and credentials. Cantella notified clients, offered two years of credit monitoring via Experian, and engaged external forensic partners. All infected machines were wiped and rebuilt, and passwords were reset.

Cantella & Co, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2020-11-11. The report records the breach type as electronic.

Cantella & Co., Inc. reported a data security incident on August 25, 2020, involving phishing emails with malicious attachments that installed malware on 23 company computers. The malware potentially exposed clients' names, addresses, and Social Security numbers. The company offered two years of complimentary credit monitoring and identity restoration services to affected individuals.