CBMM Reports Data Breach Affecting Sensitive Personal Information CBMM, a data management organization, disclosed a cybersecurity incident in which unauthorized access to sensitive personal information may have occurred. On August 9, 2024, the company detected suspicious activity within its systems and initiated an investigation. The probe confirmed that an unauthorized third party accessed and potentially acquired personal data between August 8 and August 9, 2024. The exposed information varies by individual but may include names, Social Security numbers, and financial account details. Nearly 17 months after the breach, on December 30, 2025, CBMM began notifying affected individuals via mail. The notifications outline the specific data compromised and offer complimentary credit monitoring services. The breach notice was filed with the Attorney General of Maine, where details of the incident are publicly available.