CSG Consultants (“CSG”) is providing notice of a data security incident that may have impacted some of its clients’ information. CSG serves local communities and public agencies throughout California by providing engineering expertise and project management services.

What Happened:
In August 2024, CSG identified suspicious network activity and immediately implemented their incident response protocols, began an investigation, and engaged independent computer forensic specialists to help. The investigation determined that an unauthorized user gained access to CSG’s system. Because there had been unauthorized access to the system, a review was conducted to determine what information was potentially impacted by the incident. From the review, it appears that the names, Social Security numbers, dates of birth, and addresses for a limited number of individuals may have been impacted.

What We Are Doing:
CSG has taken steps to prevent a similar incident from occurring in the future, including tightening endpoint monitoring controls, changing passwords, and other measures. CSG will also be mailing letters to impacted individuals with more information about the incident, and the opportunity to enroll credit monitoring and identity restoration services will be provided at no cost.

What You Can Do:
Individuals should remain vigilant for incidents of identity theft or fraud by reviewing bank accounts and other financial statements, as well as credit reports, for suspicious activity. Incidents of identity theft should be reported to law enforcement or the Attorney General. Recommendations by the Federal Trade Commission regarding identity theft protection and details on how to place a fraud alert or a security freeze on a credit file can be found at www.identitytheft.gov.

For More Information:
Individuals should contact 1-800-939-4170, Monday through Friday, from 9 am – 9 pm Eastern Time to determine whether they were affected by this incident or if they have any questions. CSG takes the need to protect the privacy and security of all information in their respective care very seriously, and deeply regret any inconvenience or concern that this matter may cause.