Subscribe To Our Newsletter

This field is for validation purposes and should be left unchanged.

ECBM Data Breach

ECBM, LP disclosed a data security incident after identifying suspicious system activity on or about October 25, 2024. An investigation found that an unknown, unauthorized individual accessed and/or acquired information from affected systems between October 19, 2024 and October 25, 2024.

ECBM
Date of Breach: October 25, 2024
CAU logo

Who was affected:

Clients of ECBM

Impacted Data:

Social Security numbers

Health insurance information

Financial account information

Driver’s license numbers

Medical information

 

ECBM, LP (“ECBM”) has issued a notice regarding a data security incident that may have exposed personal information belonging to certain individuals. According to the company, ECBM identified suspicious system activity on or about October 25, 2024.

ECBM, LP’s Data Breach Investigation

After discovering the activity, ECBM launched an investigation with the help of cybersecurity specialists. The investigation determined that an unknown, unauthorized individual accessed and/or acquired certain information stored in affected systems.

ECBM stated that it then conducted a thorough and time-intensive review of the impacted files to determine whether sensitive information was at risk and identify the individuals whose information may have been involved.

The company said it notified law enforcement and began taking steps to confirm the security of its systems. ECBM also stated that it has been reviewing its policies, procedures, and processes related to the storage and access of personal information to help reduce the likelihood of a similar incident occurring in the future.

Individuals who received notice from ECBM may have had sensitive personal information exposed and should take the incident seriously.

When Did This Breach Occur?

According to ECBM, the company identified suspicious system activity on or about October 25, 2024. After beginning its investigation, ECBM determined that an unknown, unauthorized individual accessed and/or acquired certain information stored in the affected systems between October 19, 2024 and October 25, 2024.

The company’s investigation included reviewing the affected files to determine what information may have been exposed and who may have been impacted. ECBM described this process as thorough and time intensive.

Although ECBM discovered the suspicious activity in October 2024, the review process was necessary to identify the individuals whose data may have been involved. Data breach investigations often require companies to examine affected systems and files before they can issue notifications to impacted individuals.

ECBM has stated that it notified potentially impacted individuals and applicable regulatory authorities where necessary.

What Information Was Breached?

ECBM reported that the information involved in the incident may have included a combination of sensitive personal data. The types of information potentially exposed include names, Social Security numbers, health insurance information, financial account information, driver’s license numbers, and medical information.

This type of information can be highly sensitive. Social Security numbers and driver’s license numbers may be used in identity theft schemes, while financial account information may place individuals at risk of fraud or unauthorized account activity. Health insurance and medical information may also be especially private and difficult to replace or secure once exposed.

ECBM has not stated that every impacted individual had all of these data elements exposed. However, individuals who received a notice from ECBM should carefully review the notice to determine what information may have been involved in their specific case.

Because the incident may have involved personal, financial, and medical information, affected individuals should remain alert for signs of identity theft, fraud, and suspicious account activity.

What You Can Do

If you received a data breach notice from ECBM, you should take steps to help protect your personal information. ECBM recommends that individuals remain vigilant against identity theft and fraud by reviewing account statements and monitoring free credit reports for suspicious activity and errors.

You may also want to consider placing a fraud alert or credit freeze with the major credit bureaus. A fraud alert tells creditors to take extra steps to verify your identity before opening new credit in your name. A credit freeze can help prevent new accounts from being opened without your authorization.

Affected individuals should also watch for suspicious emails, phone calls, text messages, or letters that reference ECBM or the data breach. Scammers may attempt to use exposed personal information to trick consumers into sharing additional details.

If your Social Security number, driver’s license number, medical information, health insurance information, or financial account information was exposed, it is important to monitor your accounts closely and report any suspicious activity right away.

Keep a copy of your ECBM data breach notice for your records.

File a Data Breach Lawsuit Against ECBM, LP

If you received notice that your personal information was exposed in the ECBM data breach, you may have legal rights. Companies that collect and store sensitive personal information have a responsibility to protect that data from unauthorized access.

The ECBM data breach may have involved names, Social Security numbers, health insurance information, financial account information, driver’s license numbers, and medical information. The exposure of this type of information may put affected individuals at risk of identity theft, fraud, and other long-term harms.

Data breach victims may be able to seek compensation for losses such as fraudulent charges, identity theft expenses, time spent addressing the breach, credit monitoring costs, and other damages related to the exposure of their information.

Class Action U is investigating the ECBM data breach and helping impacted individuals understand their rights. If you received a notice from ECBM stating that your personal information may have been involved, you may qualify to join a data breach lawsuit.

Contact Class Action U today to learn more about the ECBM data breach investigation and find out whether you may be eligible to take legal action.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: March 2026
Date of Breach: June 23, 2026
Date of Breach: March 9, 2026

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.