Chatsworth Products, Inc. (CPI) says it noticed suspicious activity on its computer network and, after bringing in outside cybersecurity specialists, determined that an unauthorized actor was inside its systems at various points between September 12 and September 23, 2024. During that window, the intruder viewed or copied certain files. CPI says it then spent months reviewing exactly what those files contained and whose information appeared in them before sending out notices, which is why this letter is only going out in April 2025 despite the intrusion happening the previous fall.
The version of this letter shared with us does not spell out which specific category of personal data was found tied to the recipient — that portion of the template was left blank rather than filled in with an actual data type. That’s a gap worth flagging directly: if your copy of the letter also doesn’t name the specific information involved, you may want to call CPI’s dedicated line to ask exactly what of yours was in the affected files before deciding how urgently to act.
What actually shows up in a letter like this, and why isn’t it listed here?
- The source document names the recipient’s information only with a placeholder — it was never populated with the real category of data (for example Social Security number, financial account details, or medical information) before this copy was generated or shared.
- Because CPI is offering two years of Experian credit monitoring, identity restoration services, and $1 million in identity theft insurance, the remedies suggest the company considers the exposed data sensitive enough to warrant that level of protection — even though the letter itself doesn’t spell out the exact field.
- No aggregate number of affected individuals was included in the portion of the filing available to us.
As an added precaution, CPI is offering 24 months of Experian IdentityWorksSM at no cost, along with identity restoration assistance that’s available immediately and doesn’t require you to sign up first. To activate the credit monitoring piece, you’ll need to enroll by July 31, 2025 at www.experianidworks.com/credit using the activation code included in your individual letter; after that date the code stops working. If you’d rather handle enrollment by phone or have questions about the identity restoration piece, Experian’s team can be reached at (833) 918-4088 and will ask for the engagement number on your letter to confirm eligibility.
Steps worth taking given the uncertainty around what data was exposed
- Enroll in the free Experian IdentityWorks membership before the July 31, 2025 deadline so the credit monitoring and $1 million insurance coverage are active while you sort out any concerns.
- Pull your free credit reports from all three bureaus at annualcreditreport.com and look for accounts or inquiries you don’t recognize, checking again periodically over the next year.
- Because CPI hasn’t specified whether financial account numbers, SSNs, or other sensitive identifiers were involved, consider placing a fraud alert or credit freeze with Equifax, Experian, and TransUnion as a precaution rather than waiting for confirmation.
- If you reused any password tied to CPI accounts elsewhere, change it along with the associated security questions, since credential reuse is a common way one breach turns into several.
- For ongoing peace of mind beyond the 24-month window CPI is offering, you might consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere, including on channels credit monitoring alone doesn’t cover.
- Save a copy of the letter and any correspondence with Experian or CPI in case you need to reference dates or the engagement number later.
If you have questions about what was found in your specific file, Chatsworth Products can be reached at (833) 918-4088 (Monday through Friday, 8:00 a.m. to 8:00 p.m. CT) or by mail at 4175 Guardian Street, Simi Valley, CA 93063.