Drummond Company, Inc. experienced an external system breach, described as hacking, in February 2026. The company discovered the breach on February 23, 2026, and began notifying consumers on March 31, 2026. The breach was reported to the Maine Attorney General on April 14, 2026, and to the Indiana Attorney General on March 31, 2026.
The breach affected 1,398 individuals in total. At least one resident in Maine and one in Indiana were affected. The specific types of personal information compromised have not been publicly detailed beyond "Name or other personal identifier in combination with". It remains unclear if sensitive data such as Social Security numbers, medical information, or financial data were involved. The company offered 12 months of identity monitoring and consultation services through TransUnion.
More details may emerge as investigations continue. Notices to affected individuals may still be in progress.