Thornburg Investment Management suffered a data breach between March 29, 2021, and April 30, 2021, where unauthorized actors gained access to employee email accounts. The incident, reported by the Maine Office of the Attorney General on January 7, 2022, exposed sensitive personal and financial data of 3,280 individuals, including 7 Maine residents. Compromised information may have included names, Social Security numbers, and financial account details, heightening the risk of identity theft and fraud. In response, the company offered 12 months of identity theft protection services through Equifax to affected individuals. The breach underscores vulnerabilities in email security protocols, potentially enabling attackers to exploit confidential employee and client data for malicious purposes.
TPRM report: https://www.rankiteo.com/company/thornburg-investment-management
"id": "tho008091825",
"linkid": "thornburg-investment-management",
"type": "Breach",
"date": "3/2021",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 3280,
'industry': 'Financial Services',
'name': 'Thornburg Investment Management',
'type': 'Investment Management Firm'}],
'attack_vector': 'Unauthorized Access (Email Account Compromise)',
'customer_advisories': ['Offered 12 months of identity theft protection '
'services via Equifax to affected individuals'],
'data_breach': {'number_of_records_exposed': 3280,
'personally_identifiable_information': ['Names',
'Social Security '
'Numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information (PII)',
'Financial Data']},
'date_publicly_disclosed': '2022-01-07',
'description': 'The Maine Office of the Attorney General reported that '
'Thornburg Investment Management experienced a data breach '
'involving unauthorized access to employee email accounts '
'between March 29, 2021, and April 30, 2021. Approximately '
'3,280 individuals were affected, including 7 Maine residents, '
'with compromised information potentially including names, '
'Social Security numbers, and financial account information. '
'Identity theft protection services were offered for 12 months '
'through Equifax.',
'impact': {'data_compromised': ['Names',
'Social Security Numbers',
'Financial Account Information'],
'identity_theft_risk': 'High (PII and financial data exposed)',
'payment_information_risk': 'High (Financial account information '
'exposed)',
'systems_affected': ['Employee Email Accounts']},
'initial_access_broker': {'entry_point': ['Employee Email Accounts']},
'references': [{'date_accessed': '2022-01-07',
'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'response': {'recovery_measures': ['Offered 12 months of identity theft '
'protection services via Equifax'],
'third_party_assistance': ['Equifax (Identity Theft Protection '
'Services)']},
'title': 'Thornburg Investment Management Data Breach (2021)',
'type': 'Data Breach'}