Congo, LLC, a distribution company based in Louisville, KY, notified the New Hampshire Attorney General of a data security incident in April 2021. Unauthorized access to an employee email account occurred in March 2021, likely via a phishing compromise of an Office 365 account. The breach potentially exposed personal information of one New Hampshire resident, including names, SSNs, driver's license numbers, and bank account details. Congo engaged forensic investigators, notified the FBI, and provided 12 months of credit monitoring.
Affected (this filing): 1