Northwest Retirement Plan Consultants Data Breach Details
The breach occurred after unauthorized access to part of the company’s IT network on August 31, 2024, which included files containing confidential consumer data.
In a filing with the Montana Attorney General, NWRPC detailed the breach, explaining that a network disruption led the company to work with forensic specialists to investigate the extent of the incident. During this investigation, it was confirmed that an unauthorized party had gained access to files that may have contained personal information such as names and other sensitive data elements.
Despite the breach, NWRPC emphasized that there is no evidence to suggest that any information has been misused. As a precautionary measure, the company has taken immediate steps to secure its network and enhance its security protocols to prevent similar incidents in the future.
On February 28, 2025, NWRPC sent personalized data breach notification letters to all affected individuals, providing details of the specific data that may have been compromised. In addition, the company is offering 24 months of free credit monitoring and identity protection services to affected individuals to help safeguard their information and prevent identity theft.
What Information Was Compromised?
The compromised data may include:
-
Full Name
-
Social Security Number
- Financial Information