Class Advisors

The Vermont Office of the Attorney General disclosed a data breach affecting Class Advisors on June 19, 2024. Unauthorized actors gained access to sensitive personal information between February 12, 2024, and March 6, 2024, though the exact number of impacted individuals remains undisclosed. The compromised data may include names, dates of birth, Social Security numbers, and financial account details, exposing victims to risks such as identity theft, financial fraud, and long-term reputational harm. The breach underscores vulnerabilities in the company’s data protection measures, raising concerns about compliance with regulatory standards and the potential for downstream legal or financial repercussions. Customers and affected parties may face prolonged monitoring requirements, while the company could encounter regulatory penalties, lawsuits, or erosion of trust among its user base. The incident highlights the critical need for robust cybersecurity frameworks to prevent similar exposures in the future.

Source: https://ago.vermont.gov/document/2024-06-19-class-advisors-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/class-advisors

"id": "cla012090625",
"linkid": "class-advisors",
"type": "Breach",
"date": "2/2024",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'name': 'Class Advisors',
                        'type': 'Organization'}],
 'data_breach': {'data_exfiltration': 'Likely (unauthorized access reported)',
                 'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Information']},
 'date_publicly_disclosed': '2024-06-19',
 'description': 'The Vermont Office of the Attorney General reported a data '
                'breach involving Class Advisors on June 19, 2024. The breach '
                'involved unauthorized access to data potentially including '
                "individuals' names, dates of birth, Social Security numbers, "
                'and financial account information between February 12, 2024, '
                'and March 6, 2024. The number of individuals affected is '
                'currently unknown.',
 'impact': {'data_compromised': ['Names',
                                 'Dates of birth',
                                 'Social Security numbers',
                                 'Financial account information'],
            'identity_theft_risk': 'High (PII and financial data exposed)',
            'payment_information_risk': 'High (financial account information '
                                        'exposed)'},
 'investigation_status': 'Ongoing (number of affected individuals unknown)',
 'references': [{'date_accessed': '2024-06-19',
                 'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
                                                       'Attorney General'},
 'response': {'communication_strategy': 'Public disclosure via Vermont Office '
                                        'of the Attorney General'},
 'title': 'Data Breach at Class Advisors',
 'type': 'Data Breach'}