Chatham Asset Management

The Maine Office of the Attorney General disclosed a data breach at Chatham Asset Management in September 2021, stemming from unauthorized access (hacking) of the company’s computer network between June 11–14, 2021. The incident compromised the personal data of 265 individuals, including the Social Security numbers (SSNs) of at least 2 Maine residents. While the breach did not involve ransomware or large-scale financial fraud, the exposure of sensitive personally identifiable information (PII) particularly SSNs poses a significant risk of identity theft, financial fraud, or targeted phishing attacks against affected individuals. In response, Chatham offered identity monitoring services via Experian to mitigate potential harm. The breach highlights vulnerabilities in the company’s cybersecurity defenses, raising concerns about data protection compliance and the safeguarding of employee or client information from external threats. No evidence suggests the attack disrupted operations or resulted in broader systemic damage, but the leak of high-value PII remains a critical reputational and regulatory liability.

Source: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/84627aaa-a694-437f-83c4-3503fa1f0963.shtml

TPRM report: https://www.rankiteo.com/company/chatham-capital-group-inc.

"id": "cha439090725",
"linkid": "chatham-capital-group-inc.",
"type": "Breach",
"date": "6/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 265,
                        'industry': 'Asset Management / Financial Services',
                        'name': 'Chatham Asset Management',
                        'type': 'Private Company'}],
 'attack_vector': 'Unauthorized Access (Hacking)',
 'customer_advisories': ['Offered identity monitoring services via Experian'],
 'data_breach': {'number_of_records_exposed': 265,
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (includes SSNs)',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Social Security Numbers '
                                              '(SSNs)']},
 'date_publicly_disclosed': '2021-09-15',
 'description': 'The Maine Office of the Attorney General reported a data '
                'breach involving Chatham Asset Management. The breach '
                'occurred between June 11, 2021, and June 14, 2021, due to '
                "unauthorized access (hacking) of the company's computer "
                'network, affecting 265 individuals, including the Social '
                'Security numbers of 2 Maine residents. Chatham offered '
                'identity monitoring services through Experian for the '
                'affected individuals.',
 'impact': {'data_compromised': ['Social Security numbers (2 Maine residents)',
                                 'Other personal data (263 individuals)'],
            'identity_theft_risk': 'High (SSNs exposed)',
            'systems_affected': ['Computer network']},
 'references': [{'source': 'Maine Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
                                                        'Attorney General']},
 'response': {'law_enforcement_notified': ['Maine Office of the Attorney '
                                           'General'],
              'remediation_measures': ['Offered identity monitoring services '
                                       'to affected individuals'],
              'third_party_assistance': ['Experian (identity monitoring '
                                         'services)']},
 'title': 'Chatham Asset Management Data Breach (2021)',
 'type': 'Data Breach'}