The Republican Governors Association (RGA) recently detailed the breach of its servers during the global Microsoft Exchange hacking campaign that occurred earlier this year in data breach notification letters sent out to impacted individuals. The Republican Governors Association (RGA) is a United States political organization composed of a “527 group” that provides campaign resources to Republican candidates nation-wide. The notification letter shared with BleepingComputer, linked below, explains that an investigation was launched on March 10th, 2021, that uncovered unauthorized access to a small section of the association’s email environment by threat actors between February and March 2021. The letter emphasizes that the investigation was unable to determine exactly what personal information was impacted by the incident, but after completing a “thorough data mining effort” to identify the impacted individuals on September 1, 2021, the following information was determined to be potentially exposed to the threat actor: names, Social Security numbers, and payment card information. The RGA is offering potentially impacted individuals two (2) years of complimentary identity restoration and credit monitoring services through Experian. CTAPT analysts will continue to monitor for repercussions of the Microsoft Exchange Server campaign that affected over 250,000 servers world-wide and the threat groups that are still utilizing the vulnerabilities.