Ferguson Wellman Capital Management

The Vermont Office of the Attorney General disclosed that Ferguson Wellman Capital Management suffered a data breach on December 22, 2022, with unauthorized access detected around December 21, 2022. The incident exposed sensitive client information, including names, Social Security numbers, and financial account numbers, though the exact number of affected individuals remains undisclosed. While the breach did not involve ransomware or a full-scale system takeover, the exposure of personally identifiable information (PII) and financial data poses significant risks, such as identity theft and fraudulent activity. In response, the company is providing complimentary credit monitoring and identity protection services to mitigate potential harm. The breach highlights vulnerabilities in data security protocols, particularly concerning high-value financial and personal records. No evidence suggests the data was misused, but the exposure alone warrants heightened scrutiny of cybersecurity measures to prevent future incidents.

Source: https://ago.vermont.gov/document/2023-01-19-ferguson-wellman-capital-management-data-breach-notice-consumers

TPRM report: https://www.rankiteo.com/company/ferguson-wellman-capital-management

"id": "fer029090625",
"linkid": "ferguson-wellman-capital-management",
"type": "Breach",
"date": "12/2022",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Unknown',
                        'industry': 'Investment Management',
                        'location': 'Portland, Oregon (HQ), with clients in '
                                    'Vermont',
                        'name': 'Ferguson Wellman Capital Management',
                        'type': 'Financial Services'}],
 'customer_advisories': 'Complimentary credit monitoring and identity '
                        'protection services offered',
 'data_breach': {'data_exfiltration': 'Likely (data exposed implies potential '
                                      'exfiltration)',
                 'number_of_records_exposed': 'Unknown',
                 'personally_identifiable_information': ['Names',
                                                         'Social Security '
                                                         'numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information (PII)',
                                              'Financial Data']},
 'date_detected': '2022-12-22',
 'description': 'The Vermont Office of the Attorney General reported that '
                'Ferguson Wellman Capital Management experienced a data breach '
                'on December 22, 2022, with unauthorized access occurring on '
                'or about December 21, 2022. The breach potentially exposed '
                'client names, Social Security numbers, and financial account '
                'numbers, but the specific number of affected individuals is '
                'unknown. The organization is offering complimentary credit '
                'monitoring and identity protection services as a response.',
 'impact': {'data_compromised': ['client names',
                                 'Social Security numbers',
                                 'financial account numbers'],
            'identity_theft_risk': 'High (PII and financial data exposed)',
            'payment_information_risk': 'High (financial account numbers '
                                        'exposed)'},
 'investigation_status': 'Ongoing (as of report date)',
 'references': [{'source': 'Vermont Office of the Attorney General'}],
 'regulatory_compliance': {'regulatory_notifications': 'Vermont Office of the '
                                                       'Attorney General'},
 'response': {'incident_response_plan_activated': 'Likely (credit monitoring '
                                                  'offered)',
              'recovery_measures': 'Complimentary credit monitoring and '
                                   'identity protection services'},
 'title': 'Ferguson Wellman Capital Management Data Breach (December 2022)',
 'type': 'Data Breach'}