Estes Forwarding Worldwide (EFW) experienced a cybersecurity incident where an unauthorized third-party actor removed files from its network on or around May 25, 2025. EFW discovered this incident on March 16, 2026, following a forensic investigation and manual document review. Notifications to affected individuals began on April 3, 2026.
The breach may have involved various types of personal information, including names, addresses, Social Security numbers, driver's license numbers, financial account numbers, medical information, dates of birth, passport numbers, and credit card information. While the Maine Attorney General reported 2,092 individuals affected, other reports indicate a total of 46,666 individuals were impacted. The company offered 12 months of complimentary credit monitoring services through Experian to those whose Social Security numbers were exposed. Specific information on how many individuals had each data type exposed is not available.
It is important to note that details about data breaches can emerge over time, and notification processes can sometimes be delayed.