On December 10, 2022, cyber criminals accessed the FBI’s InfraGard membership portal, a cooperative public-private partnership that helps protect U.S. critical infrastructure, and stole contact information of approximately 80,000 FBI InfraGard partner entities. The information stolen included usernames, first and last names, phone numbers, business titles, email addresses, organizations, critical sector associations, and zip codes. The FBI immediately locked all user accounts and paused processing of new InfraGard applications, and has informed members of the potential data breach and the potential threat of continued exploitation by malicious cyber actors. The FBI recommends InfraGard members take several steps to protect themselves from malicious cyber-attacks using the exfiltrated information, including using strong passwords, ensuring mobile carriers place additional security measures on accounts, and conducting regular web searches for company name to identify results that return multiple websites that may be used in a scam.