Bay Colony Associates, Inc. experienced an external system breach, described as hacking, which occurred between January 14, 2026, and January 18, 2026. The company discovered the breach on February 18, 2026, and began notifying consumers on March 9, 2026. This incident was publicly reported on March 10, 2026, via the Maine Attorney General's office.
The breach involved the compromise of personal identifiers including names and other unspecified personal information. A total of 2,290 individuals were affected, including 2 residents of Maine. The company offered 12 months of credit monitoring and identity protection services through Experian to those impacted. The specific nature of the 'other personal identifier' has not been publicly specified.
Additional details about the breach may emerge as further investigation takes place, and breach notices to other states may be delayed.