Data Breach Watch logoDBW
    Other
    High
    investigation open
    Updated about 1 month ago

    MMMCA Data Breach

    Key takeaways

    • Reports suggest a potential breach involving MMMCA.
    • Discovered on May 26, 2026.
    • Possible data exposed: Social Security Number, Date of Birth, Phone Number, Address, Name, Financial Account Information.
    • Affects individuals in: New York, New Jersey, Maine.
    • Confirmation level: Confirmed by regulators.

    Breach confirmed

    The MMMCA breach is confirmed. If you may be affected, add your details below and we will take it from there.

    Detailed summary

    The Metropolitan Marine Maintenance Contractors’ Association (MMMCA) reported a hacking-related incident in 2026 that resulted in a data breach. The unauthorized activity was identified in April 2026 and involved a virtual private network. Notifications were sent to affected individuals starting in May 2026. The incident was disclosed through a filing with the Maine Attorney General.

    Personal information exposed in the breach includes Social Security numbers, dates of birth, phone numbers, addresses, names, and financial account information. A confirmed 25,528 individuals received notification letters. This was a third-party breach involving the Metro-ILA Pension Fund, Fringe Benefit Fund, and Individual Account Retirement Fund, which are business associates providing employee benefits to MMMCA members. The exact details of how the breach occurred via the VPN are not fully clear.

    Data breach incidents often have long-term implications, and additional information may emerge over time. Affected individuals are typically advised to monitor their accounts and take advantage of any offered protections.

    Data possibly involved

    • Social Security Number
      Can be used to open fraudulent accounts and file false tax returns
    • Date of Birth
      Often used in combination with other data for identity theft
    • Phone Number
      May be used for SIM swapping or targeted scam calls
    • Address
      Could be combined with other data for identity theft
    • Name
    • Financial Account Information

    Company Response Timeline

    Response Grade
    B

    Notified consumers within 31–60 days

    Breach Occurred

    Apr 7, 2026

    Company Discovered

    Apr 1, 2026

    Regulator Notified

    May 1, 2026

    Consumers Notified

    May 22, 2026

    -6 days to discover
    51 days to notify consumers

    Breach Verification Status

    Reports Only

    Complete

    Initial dark web reports of potential breach

    Company Confirmed

    Complete

    Company has acknowledged the breach

    Regulator Confirmed

    Current

    Confirmed by regulatory authorities

    Note: Breach verification can take time. Information may evolve as more details become available from companies and regulators.

    Case Status:
    Investigation Open

    We're actively investigating this case and seeking affected individuals.

    Were you affected? Submit your information below.

    Were You Affected By This Breach?

    If you are a customer or have received a data breach notification, you may submit your information as part of our ongoing investigation. Submitting your information is free and does not obligate you.

    Were you in the MMMCA breach? Check your email

    Free scan against known breach datasets. Then remove your info from data-broker sites with Data Shield.

    No signup required. 30-second scan. Your email is only stored if you opt into alerts.

    Get your info off data-broker sites

    Data Shield files removal requests with every broker that accepts an authorized agent, and gives you the exact link or letter for the brokers that only accept requests from you.

    See how Data Shield works

    Check Your Risk Level

    Answer a few questions to understand how this breach might affect you

    What should I do?

    Change your passwords

    Update passwords for the affected service and any accounts using the same password

    Enable two-factor authentication

    Add an extra layer of security to your accounts

    Monitor your accounts

    Watch for suspicious activity on your financial and online accounts

    Watch for phishing attempts

    Be cautious of emails or messages claiming to be from the affected company

    Consider a credit freeze

    Prevent unauthorized access to your credit report

    Scan your email for other exposures

    Check whether this address shows up in other known breaches. Free, no account.

    Get your info off data-broker sites

    Data Shield files removal requests with every broker that accepts an authorized agent, and gives you the exact link or letter for the brokers that only accept requests from you.

    See how Data Shield works

    Got a notice about this breach?

    Paste it into BreachBrief to see exactly what data was exposed, how serious it is, and what to do next.

    Protect yourself

    Share This Breach Alert

    Help friends and family who might be affected by sharing this breach information

    Are you a law firm investigating this breach?

    Get qualified claimant leads delivered directly to your CRM.

    Related breaches

    Stay informed about breaches like this one

    We'll notify you when new data breaches are reported. Free, no spam. Unsubscribe anytime.

    Free, no spam. Unsubscribe anytime.