Barnhart Group, Inc. experienced an external system breach caused by hacking, reportedly a ransomware attack by the Akira threat group, which occurred on August 27, 2025. The company discovered the breach on January 23, 2026. Official notification to state attorneys general and consumers began on February 4, 2026.
The breach affected 1,435 individuals in total, including residents of Texas, Maine, and Vermont. Exposed data included names, Social Security Numbers, dates of birth, addresses, driver's license numbers, government-issued ID numbers, credit or debit card numbers, financial account numbers, medical information, health insurance details, employee and customer records, audit and payment details, invoices, emails, phone numbers, confidential documents, and non-disclosure agreements.
More details may emerge as investigations proceed.