On September 11, 2023, Altman Specialty Plants discovered a data breach involving unauthorized access to its network. This breach was identified as a ransomware attack by the infamous hacker group, LockBit, which allowed cybercriminals to access certain files and folders within Altman's systems.
The breach was extensive and affected numerous individuals across the United States, with specific numbers reported in states like Texas (6,924 people), Maine (2 people), and Massachusetts (2 people).
The breach exposed sensitive consumer information, including:
Altman Specialty Plants first became aware of the suspicious activity on September 11, 2023, and immediately launched an investigation with the help of third-party cybersecurity specialists. The investigation confirmed unauthorized access and led to a comprehensive review of the affected files.
This review concluded on July 2, 2024, revealing the types of information that were compromised.
For more details, you can view the disclosure on the Maine Attorney General's website, the Texas Attorney General's website, the Massachusetts Attorney General's website, and the California Attorney General's website.
In response to the breach, Altman Specialty Plants took action to secure its systems and mitigate further risks. They launched a thorough investigation to assess the breach's extent and notified affected individuals as soon as possible. The company has since implemented additional security measures and provided training to its employees to enhance data protection.
Altman is offering affected individuals complimentary access to credit monitoring services for either twelve or twenty-four months, depending on state requirements. This service is provided at no cost to the individuals impacted by the breach. Additionally, Altman has provided guidance on protecting against identity theft and fraud, including steps to place fraud alerts and security freezes on credit files.
If you believe you have been affected by this data breach, it is crucial to take proactive steps to protect your personal information. Here are some recommended actions:
A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.
This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.