First Atlantic Capital, Ltd., a financial services company, experienced an external system breach (hacking) that occurred on September 18, 2025. The company discovered this breach on December 31, 2025, and subsequently began notifying consumers on January 30, 2026. This incident was reported to various state Attorneys General, including Maine, Indiana, and Massachusetts.
The breach involved the exposure of sensitive personal information, including names, Social Security Numbers, and financial data for at least 1,582 individuals. Of these, 3 Maine residents, 46 Massachusetts residents, and 57 Indiana residents were affected. The specific types of "other personal information" that may have been compromised have not been publicly detailed. Identity theft protection services, including credit monitoring and a $1 million identity theft insurance policy, were offered for 12 months via TransUnion.
More details may emerge as investigations continue, and affected individuals may receive delayed notifications based on state regulations.