CR&R INCORPORATED

CR&R Incorporated, a commercial organization based in Stanton, CA, reported an external system breach (hacking) that occurred on October 19, 2022, but was not discovered until October 30, 2024 — over two years later. One Maine resident was among the 9,895 total individuals affected. Consumer notifications were sent on December 26, 2024. Affected individuals were offered 12 months of CyberScout credit monitoring and identity protection services.

Affected (this filing): 1

CR&R Incorporated notified consumers of a data breach involving unauthorized access to email accounts via stolen credentials. The incident compromised names, addresses, phone numbers, and financial account information for a subset of individuals. CR&R provided 12 months of credit monitoring and established a call center for affected consumers.