Advanced Power Services (NA) LLC detected suspicious activity within its computer network on November 12, 2025. An investigation, supported by third-party cybersecurity experts, found that an unauthorized third party accessed a portion of the network between August and November 2025. This incident was later linked to a ransomware attack by the Akira group.
The breach may have exposed Social Security numbers, credit and debit account information, driver's licenses, financial account numbers, financial account codes, government identification numbers, names, dates of birth, and addresses. Medical information was also possibly exposed, but this remains unconfirmed. The exact number of affected individuals has not been publicly confirmed.
Advanced Power Services began notifying regulators and affected individuals in August 2026. The breach was reported to the Massachusetts Attorney General on August 17, 2026, and to the Vermont Attorney General on August 18, 2026. Further details may emerge as investigations continue, and individual notifications may be delayed.