CGP&H, LLC, which specializes in affordable housing consulting, community development, and government administration, announced a data breach affecting its systems. An unauthorized actor gained access to its network between June 19 and June 20, 2025. The company discovered this breach during a review completed on May 7, 2026, and began notifying consumers on June 1, 2026.
The exposed data included names, Social Security numbers, Individual Taxpayer Identification Numbers (ITINs), driver’s license numbers, state identification numbers, other government-issued identification numbers, and financial account information. The total number of affected individuals has not been publicly disclosed. At least one Maine resident was notified of the incident. CGP&H offered 12 months of credit monitoring and identity theft protection services through CyberScout to affected individuals.
Data breach notices are an evolving area; additional details about this incident may emerge over time. Affected individuals may receive delayed notifications.