Porter & Curtis LLC, an insurance procurement and risk management firm, notified California regulators of a data breach involving a business partner. Unauthorized access to Porter & Curtis data occurred between February 12 and March 18, 2020. The incident potentially exposed personal information, including names and government identifiers, of individuals who provided data to the firm. Porter & Curtis reported the incident to the FBI, engaged cybersecurity firms, and offered one year of credit monitoring via Experian IdentityWorks.