Carrell Blanton Ferris & Associates Data Breach Investigation

Recently, Carrell Blanton Ferris & Associates reported to the Attorney General of Vermont that it had experienced a data breach in which the sensitive personal identifiable information and protected health information in its systems may have been accessed and acquired. According to the breach notice, on or about October 30, 2023, Carrell Blanton Ferris & Associates discovered a data security incident in which an unauthorized third party accessed its computer network. As a result, Carrell Blanton Ferris & Associates launched an investigation to determine the nature of the incident.

Through its investigation, Carrell Blanton Ferris & Associates learned that sensitive personal information may have been viewed and taken by an unauthorized third party between September 5, 2023, and November 1, 2023. As a result, Carrell Blanton Ferris & Associates began a review of the data to determine what information had been impacted as well as identify the specific individuals affected. While the information impacted varies depending on the individual, the type of information potentially exposed includes:

• Name
• Social Security number
• Date of birth
• Driver’s license or state ID number
• Passport number
• Taxpayer ID number
• Financial information (e.g., account number, routing number, digital signature, payment card number, payment card expiration date)
• Medical information
• Health insurance information

As a result of the data breach, Carrell Blanton Ferris & Associates began mailing data breach notification letters to impacted individuals. Based on the breach notice sent to Vermont residents, Carrell Blanton Ferris & Associates is providing affected individuals with a list of the specific type of sensitive information impacted and complimentary credit monitoring services. A link to the form breach notification letter that Carrell Blanton Ferris & Associates filed with the Attorney General of Vermont is below.