Charles Pratt & Company has recently reported a data security incident that may have exposed personal information following a phishing attack. The breach, which occurred in June 2025, involved unauthorized access to an employee’s email account, potentially compromising sensitive data. Affected individuals may be entitled to compensation through a class action lawsuit. This article outlines the breach details, the response taken by Charles Pratt & Company, and the steps you can take to protect your information.
Charles Pratt & Company’s Data Breach Investigation
At the end of June 2025, a Charles Pratt & Company employee inadvertently clicked on a phishing email, which allowed an unauthorized intruder to gain access to the company’s email environment for approximately three weeks. The phishing email appeared to be from a trusted source but, once clicked, enabled the intruder to read and send emails using the compromised employee’s email account.
During this time, the intruder sent a fraudulent email, impersonating a client and instructing Charles Pratt to conduct a funds transfer. The email included new banking details and instructions for a significant amount, which appeared legitimate due to the apparent authority of the email’s content. Following this email, Charles Pratt processed the transfer on June 26, 2025. The affected client was notified, and the funds transfer was reversed, making the client whole.
The breach was discovered on July 8, 2025, when the fraudulent transfer was identified. Immediately after realizing the issue, Charles Pratt notified the Federal Bureau of Investigation (FBI) and worked with their service provider to secure the company’s IT infrastructure. The intruder had access to only one employee’s email, and once detected, the email account was locked to prevent further unauthorized access.
Charles Pratt then hired Cypfer, a forensic cybersecurity firm, to investigate the incident and remediate the attack. This firm was brought on board on October 1, 2025, to perform a thorough investigation and implement enhanced security measures.
When Did This Breach Occur?
The breach began when an employee unknowingly clicked on a phishing email at the end of June 2025. The intruder had access to the employee’s email for approximately three weeks, during which fraudulent activity occurred. The breach was discovered on July 8, 2025, and remedial actions were taken immediately.
What Information Was Breached?
While the specific details of the exposed information are not fully disclosed, the following types of sensitive data were potentially affected by the breach:
-
Client information, including banking details
-
Email communication between Charles Pratt & Company and its clients
-
Employee email accounts (one employee’s email was compromised)
At this time, there is no indication that any additional employee emails were compromised. The company has stated that no personal financial data from affected individuals was taken, and the affected client’s transfer was reversed.
What You Can Do
If you were notified about this breach or suspect your information may have been compromised, there are several steps you can take to protect yourself from potential fraud and identity theft:
-
Monitor your financial accounts: Review your bank and credit card statements for any unauthorized transactions. Immediately report any suspicious activity to your financial institution.
-
Place a fraud alert or credit freeze: Consider placing a fraud alert or security freeze on your credit file with the major credit bureaus to prevent unauthorized access.
-
Review your credit reports: You are entitled to a free annual credit report from each of the three major credit bureaus. Regularly review these reports for any unusual activity.
-
Change passwords: If your email account or other online accounts were involved, change your passwords to ensure your information is secure.
-
Stay vigilant for phishing attempts: Be cautious of emails or phone calls asking for sensitive information, especially if they seem to be from known contacts but seem unusual or unexpected. Always verify the request through an alternative communication method.
Charles Pratt & Company is providing additional resources, including guidance on how to monitor accounts and protect personal information. If you were impacted by this breach, check the notice you received for instructions on enrolling in any offered services.
File a Data Breach Lawsuit Against Charles Pratt & Company
If you have received a notification regarding this data breach or believe your information was compromised, you may be entitled to file a lawsuit to seek compensation. Data breaches like this one can lead to financial fraud, identity theft, and emotional distress. If you were affected, legal action may be necessary to ensure your concerns are addressed.
Contact Class Action U for a free consultation to explore your legal options. We can connect you with attorneys who specialize in data breach class action lawsuits. Fill out our quick, easy, secure form today to see if you have a case and get started on the path to seeking compensation.
