Gateways Community Services, a non-profit organization providing disability and human services, disclosed a data breach on May 5, 2026. The breach occurred on February 2, 2026, and was discovered on the same day. The company reported the incident to the Massachusetts Attorney General, and official notification letters were sent to affected individuals via mail.
The breach exposed several types of personal information, including first and last names, Social Security numbers (SSN), home addresses, dates of birth, government IDs, federal, state, and local tax withholding amounts, Employer Identification Numbers (EIN), and W-2 forms. While sources indicate medical and financial information may have been affected, specific details about these data types were not publicly disclosed by the company. A total of 689 individuals, including at least 29 Massachusetts residents and 15 Maine residents, were affected. The specific attack vector and incident discovery method have not been disclosed.
Data breaches often involve a period where full details are still emerging. Notices to consumers can be delayed as investigations continue.