On September 10, 2024, Cunningham Group detected unauthorized access to its network, which persisted from September 6 to September 13, 2024. The breach exposed highly sensitive consumer data, including personally identifiable information (PII) such as names, addresses, Social Security numbers, driver’s license numbers, government-issued IDs, dates of birth, and credit/debit card details. Additionally, protected health information (PHI)—including medical and health insurance records—was compromised. The attack impacted at least 1,330 individuals across Texas, Massachusetts, and potentially California, though the total number may be higher.The stolen data poses severe risks of identity theft, financial fraud, and medical identity misuse, despite no confirmed misuse to date. The company responded by securing systems, engaging cybersecurity experts, and notifying law enforcement. Affected individuals were offered two years of free credit monitoring, identity restoration, and $1M in identity theft insurance via Experian. The breach’s severity stems from the combination of PII, PHI, and financial data exposure, alongside prolonged unauthorized access before detection.