CPT Group, Inc. notified Delaware residents of a phishing incident where an unauthorized individual accessed an employee's email account from Nov 22 to Dec 8, 2017. The breach potentially exposed class member names, addresses, and Social Security Numbers. CPT engaged forensic investigators, implemented multi-factor authentication, and offered one year of Kroll Identity Monitoring to affected individuals.