Graebel Companies, Inc., a commercial entity operating out of Aurora, CO, experienced an external system breach, described as hacking, on December 19, 2024. The company discovered this breach on October 24, 2025. Graebel Companies, Inc. began notifying affected consumers on November 10, 2025, with subsequent notifications on November 13, 2025, December 19, 2025, and January 16, 2026. The breach involved the acquisition of names and other personal identifiers.
The breach affected 17 residents in Maine. The total number of persons affected beyond Maine residents has not been disclosed. Identity theft protection services, specifically twenty-four months of credit monitoring and identity theft protection through TransUnion, were offered to affected individuals. The specific types of "other personal identifiers" acquired have not been publicly detailed.
Details surrounding data breaches can emerge over time, and notification timelines may vary.