Capital Asset Management Group, Inc.

The Vermont Office of the Attorney General reported a data breach involving Capital Asset Management Group, Inc. on October 23, 2024. Unauthorized access to an employee's email account could have involved personal information such as names, Social Security numbers, driver's license numbers, financial account numbers, and/or payment card numbers, although the number of individuals affected is unknown.

Source: https://ago.vermont.gov/document/2024-10-23-capital-asset-management-group-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/capital-asset-management-group

"id": "cap209080425",
"linkid": "capital-asset-management-group",
"type": "Breach",
"date": "10/2024",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'industry': 'Financial Services',
                        'name': 'Capital Asset Management Group, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Email Compromise',
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['names',
                                              'Social Security numbers',
                                              "driver's license numbers",
                                              'financial account numbers',
                                              'payment card numbers']},
 'date_publicly_disclosed': '2024-10-23',
 'description': "Unauthorized access to an employee's email account could have "
                'involved personal information such as names, Social Security '
                "numbers, driver's license numbers, financial account numbers, "
                'and/or payment card numbers.',
 'impact': {'data_compromised': ['names',
                                 'Social Security numbers',
                                 "driver's license numbers",
                                 'financial account numbers',
                                 'payment card numbers']},
 'initial_access_broker': {'entry_point': 'Email Compromise'},
 'references': [{'date_accessed': '2024-10-23',
                 'source': 'Vermont Office of the Attorney General'}],
 'title': 'Data Breach at Capital Asset Management Group, Inc.',
 'type': 'Data Breach'}