In January 2026, Hightower Holdings, LLC experienced a cybersecurity incident involving unauthorized access to its network through compromised user accounts. An unauthorized actor downloaded files from the network on January 8-9, 2026, and again on January 19-20, 2026. The company began mailing notification letters to affected individuals on March 23, 2026.
The breach exposed names, Social Security numbers, and driver’s license numbers for 131,483 individuals. While some later reports mentioned financial-account information, the primary state filing and notification summaries consistently identified only names, SSNs, and driver's license numbers. No medical information was identified as compromised.
Hightower filed a breach notice with the Maine Attorney General on March 23, 2026, confirming the incident. The company stated that it found no indication that the information had been used for identity theft or fraud in connection with the incident. Details can emerge later, and notices may be delayed.