CLG (Consumer Legal Group) - Personal Data Breach!

On Friday 13th of September 2024, I received a bizarre email from CLG. It would appear, that somehow, this was FWD (Forwarded) to me in error, that contained communication between a partly identified women (by name), identified case details, an unidentified ‘legal representative’ (two names in the Subject - possibly one is the lady and the other is her representative although this is not clear who is who), CLG Solutions Team regarding the women and some NSFs (“Non Sufficient Funds” ?).

The email - as previously stated - revealed the woman in question, possibly her ‘legal rep’ at the same time, although the names are not outright matched in the email contents, her case number and evidently reveals she has a undescribed debt of some kind to settle with CLG.

Why, how, I was attached to this, is unexplainable, someone has fucked up MASSIVELY. Words cannot go the full length of the incompetence in nature.

See the email below (some information is of course redacted by myself in order to lower the severe exposure already in place thanks to CLG etc) - as well as my immediate flagging response and what I’d receive back - haven’t heard anything since regarding:



Just minutes before making this point, I received this following email - again from CLG’s Side exposing protected/classified information, hence, after a quick discussion with @OfclyGoodenough , it would be best to now call them out on the forum perhaps:

Why the heck did this new email - evidently sent 3 days ago - take them the 3 days to decide to send it over to me as well? Very questionable if I do say so myself. Absolutely shocking, and poor measures in place.

@scamterminator2021 @MajorLeeAwesome @drwat @Tillianne @Jhawk @JusticeinTexas @FrankWest @CatMan @SouthernCulture_x @LordOfTheRings

7 Likes

So, this company appears to be located in New York County, NYC, NY.

You can report this data breach to the State of NY here:

NYSOAG SB Form

Since they are a financial services company, you can also report their misconduct here:

Consumer Complaint - Guest Applications - DFS Portal (ny.gov)

6 Likes

I have now submitted a formal BBB complaint. I have attempted to reach CLG by phone, no answer - I will attempt again soon.

I will now report this Data Breach to the STATE OF NY and report their misconduct through the DFS portal via what you have provided me, thanks @scamterminator2021 !

3 Likes

You are welcome!

4 Likes

@scamterminator2021

3 addresses for CLG:

140 Broadway, New York, NY 10005
PO Box 5013, Millville, NJ 08332
(both found on their website)

11 Broadway, New York, NY 10004-1303
(found on their BBB page)

What’s the right address to put down??? (I’d assume they won’t want PO boxes tho, so between 11 Broadway or 140 Broadway realistically…)

4 Likes

It should be the one in NYC. They appear to be affiliated with the attorney Jack Gross who is definitely in NYC. Put 140 Broadway

3 Likes

I have now successfully filed a NYSOAG S8 Form and submitted a DFS NY Consumer Complaint [Data Breach Relevant] (Form) - Intake reference number.

Now we wait.

4 Likes


Victor Ko: [email protected]



5 Likes

That’s nice that you’re getting some traction pretty fast! I find that State authorities frequently respond much fast than the Federal ones.

3 Likes

My second email has not been responded to by CLG staff this entire time, nor has “Shannon” followed through with sending me the call summary. Appalling.

So far, nothing new since the above.

5 Likes

REPLY ESTABLISHED alas:

@OfclyGoodenough @scamterminator2021 @MajorLeeAwesome @drwat @Tillianne @Jhawk @JusticeinTexas @LordOfTheRings @CatMan @SouthernCulture_x

What do we think?

6 Likes

Typical cookie-cutter BS reply. I’d just wait for the authorities to reply to your complaint.

3 Likes

I could reject it and say something?

1 Like

If it was me, I would be inclined to express my dissatisfaction this way:

"Dear Consumer Legal Group,

I am writing to express my disappointment with your recent response regarding the data leak incident.

Your reply lacked specific details about the measures you intend to implement to address this situation. It did not outline any remedies or restitution for the victims affected by this breach. Additionally, the generic nature of your response raises concerns about the seriousness with which you are treating this matter, especially considering that your organization is supposed to be operated by qualified attorneys.

It is precisely due to companies like yours that we increasingly see consumer data on the Dark Web. This highlights the urgent need for stronger privacy protections and accountability. As a consumer, I expect transparency and a proactive approach in addressing these critical issues.

I urge you to provide a more comprehensive response that includes specific actions you plan to take to rectify this situation and protect the privacy of those affected.

Thank you for your attention to this important matter.

Sincerely,

Your Name"

Feel free to modify as you see fit :slight_smile:

3 Likes


SENT That should teach them…

3 Likes


@OfclyGoodenough @scamterminator2021

3 Likes

I think it is a satisfactory response. They won’t disclose any further details. I’m sure they are working with an attorney, as well.

2 Likes

Yeah, I’ve already accepted the response.

By the way, it’s not even an allegation… Those fucking cheeky bastards! It’s a fact. Irrefutable evidence backs it straight up, undeniable.

2 Likes

It’s because these retards and their filthy dumb lead generators aren’t held accountable by our lovely government and legal system… Had they been arrested and sued for shit like that, it would have been a totally different story.

2 Likes

Just wanted to add to this, regarding the u.s legal system as a few weeks ago - I applied for an ESTA (Visa Waiver) to come visit soon. WOW! They rejected my application and told me I’m now required to apply for a B Tourist Visa (b 12 or whatever).

Want to know why? Because I stepped foot in my own home country in the middle east that I should be able to freely visit without retaliation from another entity, which the same entity bombed said country and made up entirely false wmd accusations in an attempt to justify it.

According to their rules & regulations this means I’m no longer able to get one because I went (although it was just under a two week stay), hence I’m required to apply! Absolutely disgraceful, not sure how they are allowed to ‘claim’ this in the handbook under whatever reason they put forward.

When I appealed → redress filing… they rejected it and furthermore told me and admitted I may be at risk for misidentification (whatever the fuck that’s supposed to mean) at the usa airports etc. Prejudice at it’s finest.

Lovely is an overstatement. Perhaps, corruption (along the lines of that) would be better words to use here. Hehe. :slight_smile:

4 Likes