CMS Companies, a financial services provider based in Wynnewood, PA, reported an external system breach (hacking) occurring between July 17 and July 20, 2021. The incident was discovered on January 4, 2022, affecting 2,284 individuals, including 3 Maine residents. The breach compromised names and financial account numbers (including credit/debit card numbers with security codes/PINs). CMS Companies sent written notifications on February 4, 2022, and provided 24 months of identity theft protection services through IDX.
Affected (this filing): 2,284