Schreck Financial Group Data Breach Investigation

Recently, Schreck Financial reported to the Attorney General of Montana that it had experienced a data breach in which sensitive personal identifiable information in its systems may have been accessed and acquired. According to the breach notice, on or around August 12, 2024, Schreck Financial became aware of suspicious activity with its email environment. As a result, Schreck Financial launched an investigation to determine the nature of the incident.

Through its investigation, Schreck Financial discovered that sensitive personal information in its systems may have been viewed and obtained by an unauthorized third party using an employee’s email account. As a result, Schreck Financial began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. On October 3, 2024, Schreck Financial completed this review. The exact type of personal information potentially exposed has not been made publicly available by Schreck Financial. However, according to state reporting guidelines, “personal information” can include the following types of information:

• Name
• Social Security number
• Driver’s license or state-issued identification card number
• Financial account number, or credit or debit card number, with or without any required security code, access code, personal identification number or password, that would permit access to a resident’s financial account

On October 17, 2024, Schreck Financial began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Montana residents, Schreck Financial is providing affected individuals with a list of the specific types of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letters that Schreck Financial filed with the Attorney General of Montana is below.