Empower Group, operating in the financial services sector, reportedly experienced a data breach in April 2026. This incident was discovered by the dark web scraping site Ransomware.Live on April 16, 2026. The threat actor, DragonForce, claimed responsibility for exfiltrating 316 GB of data.
The breach exposed sensitive personal information for an estimated 6.69 million individuals. The confirmed data types include Social Security numbers, full names, addresses, phone numbers, email addresses, and dates of birth. The company had not publicly confirmed the breach or issued official notification letters as of May 26, 2026. The full extent of individuals affected and the specifics of the compromised data types remain unclear beyond initial reports.
Details can emerge later as investigations progress, and official notices may be delayed.