An independent financial advisor (securities offered through Cambridge Investment Research, Inc.) notified the Maryland Attorney General of a data security incident. Unauthorized access to a single email mailbox occurred between September 24 and October 1, 2024, likely via phishing. The incident affected 4 Maryland residents, exposing names, addresses, DOB, SSNs, driver's licenses, and financial account numbers. The advisor engaged forensic reviewers, secured the environment, and offered 12 months of credit monitoring and identity protection services through IDX.
Affected (this filing): 4