The Vermont Office of the Attorney General reported a data breach involving Capital Asset Management Group, Inc. on October 23, 2024. Unauthorized access to an employee's email account could have involved personal information such as names, Social Security numbers, driver's license numbers, financial account numbers, and/or payment card numbers, although the number of individuals affected is unknown.

Capital Asset Management Group, Inc. (CAMG) suffered a data breach resulting from unauthorized access to an employee’s email account between January 19, 2024, and February 9, 2024. The incident exposed the personal information of two Maine residents, including their names, Social Security numbers, and financial account details. While the breach was limited in scope, the compromised data—particularly Social Security and financial records—poses a significant risk of identity theft and fraud. CAMG responded by issuing notification letters on October 23, 2024, and offered affected individuals identity theft protection services through Equifax as a remedial measure. The breach highlights vulnerabilities in email security protocols, emphasizing the need for stricter access controls and monitoring to prevent similar incidents in the future.