Gravity Payments, Inc., a financial services company, experienced an external system breach involving hacking between August 12, 2025, and August 23, 2025. The company discovered the breach on August 22, 2025. Gravity Payments, Inc. reported this incident to the Maine Attorney General and the Massachusetts Office of Consumer Affairs on February 4, 2026.
The breach compromised individuals' names and Social Security Numbers. A total of 2,278 persons were affected, including 14 Maine residents and 16 Massachusetts residents. The company offered 12 months of credit monitoring and identity theft protection services through Experian to affected individuals. It remains unclear if other types of sensitive data, such as financial account numbers or medical records, were involved, as the available information explicitly states only names and SSNs were acquired.
Details about data breaches can emerge over time, and notification processes may experience delays.