Bain Capital, LP, a private investment firm, identified unauthorized access to a limited number of its resources, including a subset of cloud storage folders, on July 28, 2026. The company removed the access, notified federal law enforcement, and engaged digital forensic investigators. The incident did not impact any of Bain Capital's products, services, or operations.
The breach exposed sensitive personal information, including names, Social Security numbers, and financial account information. The company disclosed the breach to the Massachusetts Attorney General's office on September 1, 2026. Law firm Shamis & Gentile P.A. is investigating the breach for potential class action litigation.
Further details about the incident, such as the exact number of affected individuals, have not yet been publicly disclosed. Information and official notifications may continue to emerge as the investigation progresses.