ERMI

ERMI, LLC reported a cybersecurity incident in Massachusetts where an unauthorized individual gained access to employee email accounts between February 15, 2025, and August 14, 2025. The breach potentially exposed personal information, including government IDs and financial account numbers, of a limited number of individuals. ERMI engaged external cybersecurity professionals, contained the incident, and offered 24 months of complimentary credit monitoring services to affected parties.

ERMI LLC notified the California Attorney General of an incident where an unauthorized individual accessed employee email accounts. The breach occurred between February 15, 2025, and August 14, 2025, and was discovered on July 25, 2025. Personal information, including medical data, may have been accessed or removed. The company engaged external cybersecurity professionals and is offering credit monitoring services to affected individuals.