.png)
Community Capital Management Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Community Capital Management, LLC data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Community Capital Management
Community Capital Management, LLC (CCM) is a financial services firm based in Fort Lauderdale, Florida. Founded in 1998, CCM is an SEC-registered investment adviser that focuses on impact investing, managing approximately $6.3 billion in assets.
The firm is known for its flagship impact bond fund and its work with a range of clients, including banks, faith-based organizations, endowments, foundations, healthcare organizations, insurance companies, non-profits, public funds, and high net worth individuals.
CCM has a team of about 39 employees and is approximately 62% employee-owned. The company has a history of investing in areas such as environmental sustainability, disaster recovery, gender lens investing, and affordable housing. Since its inception, CCM has invested around $17.3 billion in various impact initiatives.
What Happened?
In April 2025, Community Capital Management experienced a data breach that may have affected individuals whose personal information was in the company’s care. The incident was disclosed to the Massachusetts Attorney General’s office on May 1, 2025.
A threat actor known as "Randy72" claimed responsibility for the breach and posted about it on the open web on April 27, 2025. The exposed data reportedly includes not only internal company documents such as financial reports, strategic outlooks, and confidential contracts, but also client personal data.
According to the official notice, the types of consumer information exposed in this breach include Social Security numbers.
CCM has offered affected individuals 24 months of complimentary credit monitoring and identity restoration services through Experian.
Your Rights and Next Steps
If you received a notice from Community Capital Management, LLC, it means your personal information may have been compromised. Even if you have not noticed any suspicious activity, it is important to take steps to protect yourself.
Here’s what you can do:
- Enroll in Free Credit Monitoring: CCM is offering 24 months of complimentary credit monitoring and identity restoration services through Experian. You can enroll online or by calling the provided assistance line.
- Monitor Your Credit Reports: You are entitled to one free credit report annually from each of the three major credit bureaus—Equifax, Experian, and TransUnion. Regularly review your reports for unauthorized activity.
- Place a Fraud Alert or Credit Freeze: You have the right to place a fraud alert or a credit freeze on your credit file at no cost. A fraud alert requires businesses to verify your identity before issuing credit, while a credit freeze restricts access to your credit report entirely.
- File a Police Report if Needed: Under Massachusetts law, you have the right to file and obtain a police report if you are a victim of identity theft.
If you have questions about the breach or need help with identity restoration, you can contact the dedicated assistance line at 1-833-745-1485, Monday through Friday, 9 am to 9 pm Eastern Time.
You May Be Entitled to Compensation
If your personal information was exposed in the Community Capital Management, LLC data breach, you may be eligible for compensation. Lawyers are ready to help you understand your rights and pursue a potential claim for damages related to this breach.
To find out if you qualify and to join a lawsuit, complete the below form.
.svg)