CCI Financial Inc. Data Breach Exposes Customer PII

Published

September 11, 2025

Updated

September 12, 2025

CCI Financial

Types of INFORMATION affected

Names
Social Security Numbers
Dates of Birth
Addresses
Government IDs
Medical Info
Financial Info

On April 3, 2025, CCI Financial Inc. discovered a significant cybersecurity incident involving unauthorized access to its network. An investigation revealed that a cybercriminal accessed and/or removed files containing sensitive information on or about March 21, 2025.

A review was completed on Aug. 11, 2025, and it was determined that personally identifiable information (PII) was compromised in the data breach. Exposed information may include names, addresses, dates of birth, Social Security numbers, driver's license numbers, and financial information, which could include account numbers or credit card numbers.

The cybersecurity incident was disclosed to the California Attorney General's office on Sept. 10, 2025. The total number of impacted individuals has not been released but is believed to include thousands of customers.

The data breach was also reported to the Texas Attorney General's office on Sept. 12, 2025, with at least 2,623 Texas residents affected.

CCI Financial Inc.'s response

In addition to required state and federal disclosures, CCI Financial began notifying affected individuals by mail on Sept. 10, 2025. The company is also offering free Kroll identity monitoring services to all impacted customers.

If you receive a notice from CCI Financial Inc, you may want to:

Sign up for the free Kroll identity monitoring services, provided by the company.
Monitor your credit reports and financial accounts for any unusual activity.
Be alert for phishing emails or phone calls that may use your exposed information.
Consider placing a fraud alert or credit freeze with major credit bureaus.

More information about the company and its services can be found on the CCI Financial website.

Protect Your Data

A breach notice means your personal details could be circulating far beyond the organization involved. One practical step is continuous monitoring: services such as Identity Defender (included with an ExpressVPN subscription) can automatically check dark-web markets, flag new credit-file activity, and request removal of your information from data-broker sites.

This kind of “early-warning system” can’t undo a breach, but it can help you spot misuse quickly and limit further exposure. ExpressVPN is offering 61% off, risk-free for 30 days, with ID Theft Insurance included and no extra cost for those who sign up for one or two years.